Uname : Linux server1.cgrithy.com 3.10.0-1160.95.1.el7.x86_64 #1 SMP Mon Jul 24 13:59:37 UTC 2023 x86_64
Soft : Apache
Ip : 203.161.60.200
Port : 443
~
/
var
/
cache
/
yum
/
x86_64
/
7
/
updates
/
gen
[ HOME ]
Exec
Submit
other_db.sqlite
SQLite format 3 @ C� -�) � �M�2�� @ YindexpkgIdpackagesA�CREATE INDEX pkgId ON packages (pkgId)K eindexkeychangechangelog?�CREATE INDEX keychange ON changelog (pkgKey)� / �triggerremove_changelogspackagesCREATE TRIGGER remove_changelogs AFTER DELETE ON packages BEGIN DELETE FROM changelog WHERE pkgKey = old.pkgKey; ENDv �;tablechangelogchangelogCREATE TABLE changelog ( pkgKey INTEGER, author TEXT, date INTEGER, changelog TEXT)^ �tablepackagespackagesCREATE TABLE packages ( pkgKey INTEGER PRIMARY KEY, pkgId TEXT)Q{tabledb_infodb_infoCREATE TABLE db_info (dbversion INTEGER, checksum TEXT) � � E� 3ed242aa7f9bea19ef43af4260ccd29d44624d66cf5f1d34b3c40d17915bb26d � >q��� (F�< #�i "�F � 7:� 79�� plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments 8 ;� � 8 � o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew� o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�b o�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�: o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re � 5l � �D o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�F o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�H o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �B � � q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server� o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication � �`� � �Go�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions� o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew� o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests x 8 x � o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�Eo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars m va m �o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skewXoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � 4j � �Eo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�Go�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�Io�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �@ � �q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication u �� u � o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12� o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � 4j � �E!o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �@ � �$q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� #o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�"o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication u �� u �'o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX&oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�%o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN ) �� ) �E*o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G)o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�B(o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) � �@ � �-q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� ,o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�+o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication u �� u �0o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX/oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�.o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� �2o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B1o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) x 8 x � 5o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�4o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E3o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars va X8oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�7o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�6q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B:o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)�9o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o<o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database�;o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �@ � �?q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� >o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�=o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication u �� u �Bo�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXAoGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�@o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� �Do�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�BCo�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) \ \ �:Go� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)�rFq�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�oEo�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database � j � �;Jo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re �-Io�oMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)�cHo�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments . �� � . �INo�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�Mo�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew�Lo�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�cKo�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS n 6n �EPo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�GOo�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter � j � �;So� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re #�-Ro�o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)�cQo�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments . �� � . �IWo�' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�Vo�C Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew�Uo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�cTo�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS P 6n P �Zo�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�EYo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�GXo�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter P�$ �^o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c]o�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;\o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re '�-[o�o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�@- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � f�� �Gao�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I`o�' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�_o�C Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew x 8 x � do�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-8 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�co�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�Ebo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars e ^� � e XhoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�go�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�fq�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� eo�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � � � �Bjo� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)�io�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �olo�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database�ko�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search = � = �oq�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load�Ano� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�rmq�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl u �� u �ro�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleXqoG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�po�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� �to�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�Bso� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �rvq�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�ouo�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database Z � Z �;yo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re 2�xo�G Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�Awo� Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments . �� � . �I}o�' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�|o�C Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew�{o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�czo�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS O 6n O �� o�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�Eo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G~o�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter 0 ]� � 0 ��o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests��q�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �o�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � 3h � �E�o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �> � �� q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� � o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication \ ���' \ �G�o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions�� o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skewX� oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�� o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN , �t.��\��D � � r , D � 26f9837529ec8886d1314252f193f695e2df988f21ba6cbdef62da935e15848fD � 7f2bca34d66595ea71392f8a9fe4f631679313d883bbc5d48d3d49e1ceb88d8bD � d3229cfb18563fc8a24139a13a8b266e417258f43d36a4a4ac3b372af35d59f8D � 187145d7bfd310c612f73b86a31e75562cbe69306dca7362841fcb038b52fa3bD � 2952ebf67510a8da5c648a66cb72fb82d02a871b1b805e3fa5d9a1ab8d1377d2D � 6af757b1f83a00f0551ab69c27a637b1a7fcd95125d64c9146be9158ec4964c4D � 69b46c2053c4fbaa163f2390003a89acba1e45f20c75c06337f18474970f4943D � 8185f310e186803f0af31262808f321254090fced72ee96c77a5b4ecea2ab08cD � 5d1951ec0080791e7902a50f19ea2eab2f07b5ce3efea78f024eb1a197abfb77D � a4b372b0da7c95c62540dcfd5049d2b4cd05abf59cb373d2a9a94bcdce3472c3D � 8638584ccb7fcde8b4799f13f6a58ef2c129baba95c41aeb504453c5262416a1D � 25d8cb3d83565ead22c4bfc3963acaa10f44a28286e88bfd60ce16ec510a113bD � 47174964aa424317b7623852dab6eb134838bc81b1ecc6687a16e8461523c3c8D � a6a35e6ed55e101d96fd0ed48dd8267a7e8e10917230172a9de28a796d39490e , �t.��\��D � � r , D � ca73e4d1c2e57869c6e300075fa3bdd65118ee30910c0ed450532b3fd0d7976bD � c10b86b4a5c3b1385c04eab748fa24507011e241349fb530ab4df3fbb719f26eD � bb1ab36dd4c499189f1a463cc83793aa1e996879aa0fc39e43580add7837b7c9D � cf900656ad664e99d27fd815261164678b178f186d6fbadf440dbc7ab48fbbfeD � 66236b68ae255104741eb03ff98c372f45d1070837fd9f390037488468b9dd1dD � 6c8904697fe6c2ee66e07070d91ead8cd93c7f2b07461f411e7fbb303c278589D � 5d56166abb7686fc795b62a2d6600a144699caccdbc3ea53b082d1535c2834b0D � 709e283813b0f0f0fdef0e1af87059ea4abce1a31640b490109436fad941d2dbD � 1315433f5602796463c98742b5395f6bc95f0716a4d9322f2131b5bd23a0bcdcD � e3f5a839e2e8acc1d26bf39b94c2d5f01d99b4c9f59926532da730dd0cc33feaD � 6777f22d398c85f89da0f1efaa40c7fb3d16e1d72eeb8ae99d1e2dc818769d0dD � 2cfc157959dd7203260a2f727d8590878e5ebaf061e1f17210e36684e46916d4D � 18552d6d05e89198db7ddef073bf9f88ff81556cc037c82a133b0eba4e12c71aD � f8c005d77b5c2074f8f5ecf019407c406d423acd0fddbce4ac8b4efa1be0f808 u 7 u � �o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load K � K �G�o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule u 7 u � �o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X� oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�� o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�� q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B� o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)�� o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule M 5l M ��#o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�"o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�!o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter a ]� � a X�'oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��&o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��%q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �$o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � � � �B�)o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��(o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � �E�+o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars��*o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �> � ��.q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �-o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��,o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��1o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�0oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��/o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��3o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�2o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) K � K � �6o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��5o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�o�4o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database u_ X�9oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��8o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��7q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�;o�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��:o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�=o�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��<o�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search e L e �c�@o�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�:�?o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)�r�>q�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl O�! ��Do�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�Co�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�Bo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re N�-�Ao�oMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�Go�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Fo�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��Eo�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew P 7 P �c�Io�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�E�Ho� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars O�! ��Mo�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�Lo�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�Ko� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re R�-�Jo�oMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�Po�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Oo�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��No�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew g 7 g �-�So�oMark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�@- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)��Ro�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�Qo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments 0 9� � 0 ��Wo�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��Vo�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�Uo�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�To� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re U � 3h � �E�Zo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�Yo�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Xo�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions �>� ��^q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �]o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server� �\o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-8 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��[o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��ao�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�`oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��_o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��co�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�bo�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�eq�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�do�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database �0 ��ho�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��gq�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load�A�fo�Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use B �� B �B�ko�Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��jo�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�ioGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o�mo�sThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��lo�?Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search a �( a �;�qo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re `��po�GMark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�oo�Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�nq�wMark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments * �� � * �I�uo�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��to�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��so�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�ro�[Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS M 5l M ��xo�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�wo� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�vo�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter 0 ]� � 0 ��|o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��{o�Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests��zq�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �yo�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � 3h � �E�o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�~o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�}o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �> � ��q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�� o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication \ ���' \ �G�o�#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��o�CMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skewX�oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN u 7 u � � o�SMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�� o�KMark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X� oGThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�� o�9Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�� q�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load K � K �G�o�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��o�GThierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule u 7 u � �o�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��o�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��o�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��q�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule , �t.��\��D � � r , D* � fe65f8c1104a49b25deba3a5dd771fe3ef37e4b8efeb398644007101e18a4473D) � fe57c2235944b61957f96287d962dc8a6f63af33aa9a45b6bff9fc30a34862f5D( � 528e29a03538329527c3f4082c917cb49d0bf14f6f4b401f793a6ea83f341395D' � 373ae4c777d075890ed70569cf89dd0563fc99e76ace4281502f4aed12d4dcf6D& � 30212ff031337cd6d1555e594dd9bb0d28c9a5c7c25257cfe0770146ed77d187D% � 37244afa6bebe0e93a5dcd0ef3ea1ac9a76f734e116ce8c087a5f791ad1136d3D$ � 6471268f8ca47b59f93b0c5a8b8bbf5e9a7d6cfb337f2a89a19b76d82ac5bde2D# � bff0a6adc60eba913218bcccc836d732221469cd7650eb27d199e3f7780373a7D" � 29d3baca7632def182f6a6250f76f26476b491b66dfe819eb6d94008003dfc3dD! � f9a690e8aa496786b4e27818af37b20bb17b3805bd626de662a2647c04ea6bb1D � 808bc13d124b864d8dd90f80437bc5d919d6dcdca1ebbd9efcd56e575fbfb500D � b957705e340403c636b68ab6ee9c49dd1552eb20220d0175dbbf84f042ac62c4D � 210a76b6e2c83684ac3c106fff35849b22269be89a5b895625ac4ca5bf489796D � 9e9a8ce7cbf019108675746a5f67d8ff853fb0b97c72cbd0f4d38b6dad0c96b7 M 5l M ��o�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�o�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter a ]� � a X� oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�� o�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�� q�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� � o�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � � � �B�!o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)�� o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � �E�#o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars��"o�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �> � ��&q�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �%o�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��$o�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��)o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�(oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��'o�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��+o�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�*o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) K � K � �.o�S Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��-o�K Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�o�,o�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database u_ X�1oG Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��0o�9 Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��/q�! Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�3o� Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��2o�G Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�5o�s Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��4o�? Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search e L e �c�8o�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�:�7o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)�r�6q�w Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl O�! ��<o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�;o�[ Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�:o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re {�-�9o�o Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�?o�# Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�>o�' Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��=o�C Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew P 7 P �c�Ao�[!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�E�@o� Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars O�! ��Eo�!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�Do�[!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�Co� !Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re �-�Bo�o!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�Ho�#!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Go�'!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��Fo�C!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew g 7 g �-�Ko�o"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�@- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)��Jo�K!Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�Io� !Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments 0 9� � 0 ��Oo�C"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��No�"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�Mo�["Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�Lo� "Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re � � 3h � �E�Ro� "Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�Qo�#"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Po�'"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions �>� ��Vq�!#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �Uo�S#Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server� �To�S"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-8 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��So�K"Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��Yo�G#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�XoG#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��Wo�9#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��[o�?#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�Zo�#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�]q�w#Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�\o�s#Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database �0 ��`o�9$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��_q�!$Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load�A�^o�#Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use B �� B �B�co�$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��bo�G$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�aoG$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o�eo�s$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��do�?$Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search a �( a �;�io� %Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re ���ho�G$Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�go�$Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�fq�w$Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments * �� � * �I�mo�'%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��lo�C%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��ko�%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�jo�[%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS M 5l M ��po�K%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�oo� %Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�no�#%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter 0 ]� � 0 ��to�C&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��so�&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests��rq�!%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �qo�S%Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � 3h � �E�wo� &Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�vo�#&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�uo�'&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions � �> � ��zq�!&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �yo�S&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��xo�K&Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication \ ���' \ �G�o�#'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�~o�''Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��}o�C'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skewX�|oG&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��{o�9&Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN u 7 u � �o�S'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��o�K'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E� o� 'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�oG'Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��o�9'Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��q�!'Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load K � K �G�o�#(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�o�'(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��o�G'Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule u 7 u � � o�S(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�� o�K(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E� o� (Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars u_ X�oG(Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�� o�9(Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN�� q�!(Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�o�(Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��o�G(Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule tr �rw|�������������������������� !&+05:?DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ! $ ' * - 0 2 5 8 : < ? B D G J N !P "S $W %Z &^ (a )d *h +j ,l -o .r /t 0v 1y 3} 4� 5� 6� 7� 8� ;� <� =� >� ?� @� A�# B�' C�) D�+ E�. F�1 G�3 H�6 I�9 J�; K�= L�@ M�D O�G P�I Q�M S�P T�S V�W W�Z X�^ Y�a Z�c [�e \�h ]�k ^�m _�q a�u b�x c�| d� e� f� g� h� i� j� k� l� n� o� p�! q�# r�& s�) t�+ u�. v�1 w�3 x�5 y�8 z�< |�? }�A ~�E ��H ��K ��O ��R ��V ��Y ��[ of flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��` ��c ��e ��i ��m ��p ��t ��w ��z �� �� �� �� �� �� �� �� �� �� �� �� ��! ��# ��& ��) ��+ ��- ��0 ��4 ��7 ��9 ��= ��@ ��C ��G ��J ��N ��Q ��S ��U ��X ��[ ��] ��b ��k ��t ��} �� �� �� ! Ä* Ą3 Ƅ< DŽE ȄN ɄW ʄ` ˄i ̄r ̈́{ ΅ υ Ѕ х ҅( Ӆ1 ԅ: ՅC ׅL U م^ څg ۅp ܅y ݆ ކ ߆ � � � � �! �$ �) �+ �. �3 �5 �8 �= �? �B �G �I �L �Q �S ��V ��[ ��] ��` ��e ��g ��j ��o ��q ��t ��y �{ �~ M 5l M ��o�K)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�o� )Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�o�#)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter a ]� � a X�oG)Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��o�9)Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��q�!)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �o�S)Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server � � � �B�o�)Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��o�G)Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � �E�o� *Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars��o�?)Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search � �> � �� q�!*Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� � o�S*Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server�� o�K*Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��!o�G*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX� oG*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12�� o�9*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��#o�?*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�"o�*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) K � K � �&o�S+Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��%o�K+Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�o�$o�s*Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database , �t.��\��D � � r , D8 � 365ab6c383dd555fe42283836abe7f7014bf20c41b0828d72f1c13ab138cc1d1D7 � b15c5bd5d17c47937d82efe2f0ce115cd380671ef484581d4184399c840e2c35D6 � d10825f54b07b6022f065b39a4e37c8c89bfdc877a230746fbbc048f9659348aD5 � ef9ae19900dd432de99370f4bb886c82cc0f4b68367dc2be63113d3f3cbd48d1D4 � 8b82511897f48ce484e303fe650c32ea1191e71ee0cbd9aff580743fa4f9067cD3 � 49941263a7a0309c58b3d3e00ab81c56b1ee1a70b49b873188cc23686f5d3d9bD2 � cae6bd3ac4c68910abe44b5f1d6e48b99b76914d3a6223b9511bde08f8a3e1cdD1 � d98a7567aa18df65a4b612f107387d6f50362fcef232a4c1fe5a246e2d477764D0 � 40080eb44ef8aa6b4771bc9e085e56264b9e562822c2bbfbd713b6887b64b41fD/ � 7f6f935600e1b0c0b16538a2e5c86c076209ebb973e4d33e6f98c66d85973c9eD. � 7f3bdd324d9659e15f12b5165027a55a0cea71990ff77d978912c84bebe83633D- � 81e77a0ae807ac0a5e4579c4ac44dde54b30b6b5c6ab31d335b8c1bd1836ecb2D, � af4f36c81584781e9a0b5038c6d887f8d9a95020701f12f3688519038ca47c15D+ � 8ad876dd83b3d0a6435b5decb5ebce5c58c33e7d6fe1fd43a96a9f7e6afcb562 u_ X�)oG+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��(o�9+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��'q�!+Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load � � � �B�+o�+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��*o�G+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule � � � �o�-o�s+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��,o�?+Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search e L e �c�0o�[,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�:�/o� ,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5^=Q@- Bump version to 1.3.10.1-5 - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)�r�.q�w+Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl O�! ��4o�,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�3o�[,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�2o� ,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re ��-�1o�o,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�7o�#,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�6o�',Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��5o�C,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew P 7 P �c�9o�[-Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6^\�@- Bump version to 1.3.10.1-6 - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1803052 - Memory leak in ACI using IP subject - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1809160 - Entry cache contention during base search�E�8o� ,Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars O�! ��=o�-Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�<o�[-Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�;o� -Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re ��-�:o�o-Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�A- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression) plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments � e�� �G�@o�#-Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�?o�'-Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions��>o�C-Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew g 7 g �-�Co�o.Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7^\�@- Bump version to 1.3.10.1-7 - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)��Bo�K-Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication�E�Ao� -Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars plicaId cant be set to the old value it had before - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions - Resolves: Bug 1762901 - cenotaph errors on modrdn operations - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2 - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10 - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option - Resolves: Bug 1796558 - Memory leak in ACI using IP subject - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments 0 9� � 0 ��Go�C.Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-4^�@- Bump version to 1.3.10.2-4 - Resolves: Bug 1837105 - Check for clock errors and time skew��Fo�.Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3^��@- Bump version to 1.3.10.2-3 - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests�c�Eo�[.Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2^��@- Bump version to 1.3.10.2-2 - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir - Resolves: Bug 1801327 - intermittent SSL hang with rhds - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted - Resolves: Bug 1827284 - Memory leak in indirect COS�;�Do� .Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1^oj@- Bump version to 1.3.10.2-1 - Resolves: Bug 1724761 - Entry cache contention during base search - Resolves: Bug 1515319 - nsDS5Re � � 3h � �E�Jo� .Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7_�"�- Bump version to 1.3.10.2-7 - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars�G�Io�#.Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6^��@- Bump version to 1.3.10.2-6 - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter�I�Ho�'.Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5^�?@- Bump version to 1.3.10.2-5 - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions �>� ��Nq�!/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load� �Mo�S/Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-9 - Resolves: Bug 1905450 - Internal unindexed search crashes the server� �Lo�S.Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-9_���- Bump version to 1.3.10.2-8 - Resolves: Bug 1905450 - Internal unindexed search crashes the server��Ko�K.Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8_��@- Bump version to 1.3.10.2-8 - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32 - Resolves: Bug 1902042 - Entries conflict not resolved by replication r �� r ��Qo�G/Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�PoG/Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12��Oo�9/Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN � �� ��So�?/Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search�B�Ro�/Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular) �r�Uq�w/Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl�o�To�s/Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database �0 ��Xo�90Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11`���- Bump version to 1.3.10.2-11 - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time - Resolves: Bug 1931182 - information disclosure during the binding of a DN��Wq�!0Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10`7�@- Bump version to 1.3.10.2-10 - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation - Resolves: Bug 1881968 - Replication Lag under high load�A�Vo�/Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use B �� B �B�[o�0Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14a{�@- Bump version to 1.3.10.2-14 - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)��Zo�G0Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13aHw�- Bump version to 1.3.10.2-13 - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context. - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind ruleX�YoG0Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-12`�+�- Bump version to 1.3.10.2-12 � � � �o�]o�s0Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16b�=�- Bump version to 1.3.10.2-16 - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database��\o�?0Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15a��- Bump version to 1.3.10.2-15 - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search : �( � : }�ba� 1Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�aa{1Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)��`o�G0Mark Reynolds <mreynolds@redhat.com> - 1.3.11.1-2dl��- Bump version to 1.3.11.1-2 - Resolves: Bug 2170224 - Fix upgrade scripts and version string�A�_o�0Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1c�@- Bump version to 1.3.11.1-1 - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes - Resolves: Bug 2170221 - Boolean attributes should be case insensitive - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use�r�^q�w0Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17c6�@- Bump version to 1.3.10.2-17 - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created - Resolves: Bug 2131083 - SIGSEGV in sync_repl I a��>�� � I k�ka{2Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)e�jcm1Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ick1Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�hcs1Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�gc71Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�fa51Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�eaW1Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�da�1Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��ca�Y1Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 7 ��e �q � 7 e�tcm2Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�sck2Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�rcs2Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�qc72Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�pa52Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�oaW2Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�na�2Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��ma�Y2Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�la� 2Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717 7 ��e �q � 7 e�}cm3Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�|ck3Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�{cs3Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�zc73Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ya53Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�xaW3Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�wa�3Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��va�Y3Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�ua� 3Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717 L �-��k � L d�ck4Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�cs4Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c74Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a54Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aW4Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�4Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)�� a�Y4Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�a� 4Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P�~cC3Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fix d �E�*��6 � d d�ck5Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�cs5Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ� c75Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H� a55Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY� aW5Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y� a�5Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)�� a�Y5Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�cC4Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cm4Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again w �E�R�z/ � w h�cs6Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c76Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a56Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aW6Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�6Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�Y6Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553Q�cE5Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�cC5Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cm5Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again % �1�� � � � % Y�!aW7Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y� a�7Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)�� a�Y7Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}� a� 7Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k� a{7Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)Q� cE6Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�cC6Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cm6Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ck6Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class='' % �h��.�@ � % y�*a�8Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��)a�Y8Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�(a� 8Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�'a{8Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)e�&cm7Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�%ck7Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�$cs7Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�#c77Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�"a57Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images 7 �Y �:�R � 7 y�3a�9Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��2a�Y9Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�1a� 9Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�0cm8Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�/ck8Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�.cs8Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�-c78Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�,a58Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�+aW8Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291) , �t.��\��D � � r , DF � b095f7fcbb5d718e30c01471ddebc9eca7b0315ab21ba2c286f3e4c44b8bf2b1DE � d45776ea070dd01bfa5681b3d5be4cd2fdb7fe2baac5c1720ab216221ef7ddf8DD � c119aff62d5c0644926253cc760d84d4a8fbbb2124668b95f93468f578a85b04DC � a1ac854d8e90e02d163b93f8f41c02c3b799b35db98f425c835e937468ad058bDB � 6d4f5821c8a6634679262138e6c634828699fef39bbd22f409c545e572e816bcDA � 572d9ccefce27e99905ba8c221c2216b7ba572949a397e457aeaf3e65ce8b4e4D@ � fb00ca97e06f7da066e8d05cafb17b9f9680e39f50979090e489d8a1720bb4d4D? � 3fb72ac0367e9afd39874f48b9a0b356b9cbb0b86d41265538358ef72583d32dD> � 5fa6b764fa4d36de1e4b14029d52584b86f65e0020290798aecbd853fb5b4ab5D= � 96954d570d0d25ab837bbc471057f6a90d46ffff9195b1391abb3cbc708c7684D< � 54773bd4792a30ed2a90d50d65778c4d34f672bedec6da03981162ca13109417D; � 3694e0f350aab4369f5eda09dba8aaf0c4d0128990509c2eab7a69e8a99c5400D: � 208142489b5b939b70a9d0d5242ac84ad700f6bc7f8549c1b26d447993c66b86D9 � 3d1f2217dd6b5ed505a6858933c562175be86840b5c6c7328291ec8c31333a56 ` �Y �:� � ` ��<a�Y:Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�;a� :Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P�:cC9Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�9cm9Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�8ck9Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�7cs9Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�6c79Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�5a59Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�4aW9Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291) d �(��%�V d ��Ea�Y;Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�DcC:Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�Ccm:Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�Bck:Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�Acs:Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�@c7:Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�?a5:Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�>aW:Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�=a�:Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602) � �(��%�V � Q�NcE;Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�McC;Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�Lcm;Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�Kck;Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�Jcs;Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Ic7;Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ha5;Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�GaW;Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Fa�;Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602) d a��>�� � d P�WcC<Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�Vcm<Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�Uck<Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�Tcs<Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Sc7<Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ra5<Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�QaW<Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Pa�<Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��Oa�Y<Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 D �>� �G � � D h�`cs=Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�_c7=Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�^a5=Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�]aW=Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�\a�=Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��[a�Y=Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�Za� =Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�Ya{=Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)Q�XcE<Jan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800 4 �1�C�( � � 4 J�ic7>Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ha5>Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�gaW>Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�fa�>Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��ea�Y>Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�da� >Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�ca{>Jan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)e�bcm=Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ack=Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class='' 7 �.�F�+ � � 7 J�rc7?Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�qa5?Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�paW?Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�oa�?Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��na�Y?Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�ma� ?Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�lcm>Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�kck>Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�jcs>Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflicts 1 �.�s�T � | 1 H�{a5@Jan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�zaW@Jan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�ya�@Jan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��xa�Y@Jan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�wa� @Jan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P�vcC?Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�ucm?Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�tck?Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�scs?Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflicts d �H�y&� � d H�a5AJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWAJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�AJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�YAJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P� cC@Jan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cm@Jan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�~ck@Jan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�}cs@Jan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�|c7@Jan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68 [ �H�y&�3 � [ Y� aWBJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y� a�BJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)�� a�YBJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553Q� cEAJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P� cCAJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cmAJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ckAJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csAJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7AJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68 � �h��.�� � }�a� CJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�a{CJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)Q�cEBJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�cCBJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cmBJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�ckBJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csBJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7BJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5BJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images I a��>�� � I k� a{DJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)e� cmCJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ckCJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h� csCJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7CJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5CJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWCJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�CJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�YCJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 7 ��e �q � 7 e�(cmDJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�'ckDJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�&csDJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�%c7DJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�$a5DJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�#aWDJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�"a�DJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��!a�YDJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}� a� DJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717 7 ��e �q � 7 e�1cmEJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�0ckEJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�/csEJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�.c7EJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�-a5EJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�,aWEJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�+a�EJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��*a�YEJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�)a� EJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717 L �-��k � L d�:ckFJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�9csFJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�8c7FJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�7a5FJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�6aWFJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�5a�FJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��4a�YFJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�3a� FJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717P�2cCEJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fix d �E�*��6 � d d�CckGJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�BcsGJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Ac7GJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�@a5GJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�?aWGJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�>a�GJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��=a�YGJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�<cCFJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�;cmFJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again , �t.��\��D � � r , DT � 121ed67b550b9b757c921a1f6eba668e72a8d28d183054b14f8e1d37b81b602bDS � 21113ab4dcd135895d98e51d9d540e8be477abdc44e185a460a9a835e382a7c1DR � a3a98ff12318616c1641d6e0d2dadf6e2f268b6bbc34e65924fe720f0ed2b498DQ � b59dc7ffbf0ef066ff9a1cf076ed8bff6d49817bed656cf03853d4c14c19563fDP � c7c905b4d230c3305d7223c1efb2e2c29d90ee0fe667ec5973b84522b52f1b7cDO � d309a7bec2af466981338b2729711aca0aac30101fc7b53822baf4eca6bf3bf3DN � 62f87a828471cada41da0e65515893c663ffb4843c97b49a68ce916292d1f8b2DM � 4dc1a1327e468460b517ab53ed5f213f2ea0b15a999fc2c3f80d7d5b477118cdDL � c7663ee5f2439075ade107aa7f0383f301032506d3673446ac4c84d046337418DK � bb05359bb91eb56f0684f800012c621df3fb69caa61349ed4d20292998b1cb0bDJ � 4c39fd8baa3677dd6ae1debc1bc8f2bcb012f024717dc7b97179d39ba6e3853fDI � 177ecfa448785c1fa6fae690a5662325ebe3e141bf45117920f280b5a8880a0aDH � 3fa609f1cadb881d127a3eed1c7b8f2fa2ba4efc32cb2e34e025b3d4215af9d1DG � e56a5b95dac0bbc46dff9f5743926a4f4bf4883bf7b515cdcd6310771c36a4a8 w �E�R�z/ � w h�LcsHJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Kc7HJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Ja5HJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�IaWHJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Ha�HJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��Ga�YHJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553Q�FcEGJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�EcCGJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�DcmGJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 again % �1�� � � � % Y�UaWIJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�Ta�IJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��Sa�YIJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�Ra� IJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�Qa{IJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)Q�PcEHJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�OcCHJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�NcmHJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�MckHJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class='' 7 �h��.� � 7 Y�^aWJJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�]a�JJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��\a�YJJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553}�[a� JJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�ZcmIJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�YckIJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�XcsIJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�Wc7IJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�Va5IJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images d �h��.�< � d Y�gaWKJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�fa�KJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��ea�YKJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553P�dcCJJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�ccmJJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�bckJJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�acsJJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�`c7JJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�_a5JJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images � �h��.�� � }�pa� LJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717k�oa{LJan Horak <jhorak@redhat.com> - 6.7.8.9-11V��@- Fixed crash when processing .exr files (rhbz#1303227)Q�ncEKJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800P�mcCKJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�lcmKJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�kckKJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�jcsKJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�ic7KJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ha5KJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white images 7 a��>�� � 7 }�ya� MJan Horak <jhorak@redhat.com> - 6.7.8.9-13W+5�- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717e�xcmLJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd�wckLJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�vcsLJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�uc7LJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�ta5LJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�saWLJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�ra�LJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��qa�YLJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 d a��>�� � d P�cCMJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe�cmMJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ckMJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csMJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�~c7MJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�}a5MJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�|aWMJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�{a�MJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��za�YMJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 d a��>�� � d P� cCNJan Horak <jhorak@redhat.com> - 6.9.10.68-5_ܙ�- Adding CTV-2020-29599 fixe� cmNJan Horak <jhorak@redhat.com> - 6.9.10.68-4_X@- Build with openjpeg2 to support JPEG2000 againd� ckNJan Horak <jhorak@redhat.com> - 6.9.10.68-3]�M@- Fixing freeze when svg file contains class=''h�csNJan Horak <jhorak@redhat.com> - 6.9.10.68-2]�@- Fixed ghostscript fonts, fixed multilib conflictsJ�c7NJan Horak <jhorak@redhat.com> - 6.9.10.68-1]�@�- Rebase to 6.9.10.68H�a5NJan Horak <jhorak@redhat.com> - 6.7.8.9-18\�,@- Fixed white imagesY�aWNJan Horak <jhorak@redhat.com> - 6.7.8.9-17\4��- Enable lcms2 support (rhbz#1585291)y�a�NJan Horak <jhorak@redhat.com> - 6.7.8.9-16[�^�- Added fix for long convert under some circumstances (rhbz#1633602)��a�YNJan Horak <jhorak@redhat.com> - 6.7.8.9-15WP �- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562, rhbz#1326834, rhbz#1334188, rhbz#1269553 � � � � �k�-OThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793)� � u�!OBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)Q� cENJan Horak <jhorak@redhat.com> - 6.9.10.68-6aK�- Added fix for rhbz#2005800 < :�Q � < a�uSOBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�k�sOThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�u�AOBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)��u� OBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�u�OBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681) , m��, � �u�!PBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�k�_OThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106)�I�k�+OThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��u�-OBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170) r � ��u� PBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�u�PBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �k�-PThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I� k�+PThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.�� u�-PBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a� uSPBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-� k�sPThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�u�APBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �!u�!QBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c� k�_PThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��$u� QBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�#u�QBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �"k�-QThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�)k�+QThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��(u�-QBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�'uSQBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�&k�sQThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�%u�AQBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �+u�!RBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�*k�_QThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��.u� RBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�-u�RBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �,k�-RThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�3k�+RThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��2u�-RBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�1uSRBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�0k�sRThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�/u�ARBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �5u�!SBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�4k�_RThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��8u� SBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�7u�SBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �6k�-SThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�=k�+SThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��<u�-SBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�;uSSBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�:k�sSThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�9u�ASBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �?u�!TBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�>k�_SThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��Bu� TBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Au�TBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �@k�-TThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Gk�+TThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Fu�-TBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�EuSTBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�Dk�sTThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�Cu�ATBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Iu�!UBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�Hk�_TThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) , �t.��\��D � � r , Db � db29a04632a66bb63dd0b015dea1aadce0cd2e22371225ebfeec0ec5dec16c02Da � 8376cfa512fe6b2ff76656a962eb9991e84736e4a697d521ce94ef01b76d8224D` � 96e5936275322903cfbb6baf53a0c7b17d256a8f32f01311f863e027c6f7d955D_ � 1eae80c524fc2bc5a90ced35062890a40b5625b866e658c984d2c21a6b84fbdaD^ � 0d7ee838bc95b1ca0f6653c7bb6bf7f82fd91bddf5008eb108ab46da2a4a15a4D] � bcf2e159d49fe0cc5b342fc05255f862141272c22ce694e38e0133129e1ca198D\ � 6a1e8e996df86eab01a9069d9b5a346d8a727e6c633a9f89b1adef59b208e01dD[ � cbb13427dedac5cf271bc5a5113b736a34f96516510eb972cb3320ae396950fbDZ � 80bdac5815e2cb87ffd8f9a1347f373f9a9ced0b8d2fe36ed814bd54f4ef39faDY � 366db37e736f288688e2f7de25a2589d720f57d0ee9d9147989b609d9dfea648DX � 9b6de03afb9e2ed1eb1fe326e14a90ed08a67cee15e148db6d1d484cd4022e4cDW � d7b21ff17ce56f83ff2000fca6f369f4160b7c039d960862da62ff6aab5c8df3DV � 3cbf76c62b3dabd78db73ad0e95a34d50022e61f36e7a967aabcc7f9c3f4c6ccDU � 2020ae44e6c85c50fdf7fbfec19d2bbaf6f8395f641b1b48c4743285b9fd8bdc r � ��Lu� UBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Ku�UBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Jk�-UThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Qk�+UThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Pu�-UBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�OuSUBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�Nk�sUThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�Mu�AUBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Su�!VBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�Rk�_UThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��Vu� VBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Uu�VBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Tk�-VThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�[k�+VThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Zu�-VBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�YuSVBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�Xk�sVThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�Wu�AVBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �]u�!WBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�\k�_VThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��`u� WBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�_u�WBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �^k�-WThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�ek�+WThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��du�-WBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�cuSWBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�bk�sWThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�au�AWBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �gu�!XBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�fk�_WThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��ju� XBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�iu�XBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �hk�-XThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�ok�+XThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��nu�-XBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�muSXBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�lk�sXThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�ku�AXBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �qu�!YBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�pk�_XThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��tu� YBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�su�YBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �rk�-YThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�yk�+YThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��xu�-YBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�wuSYBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�vk�sYThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�uu�AYBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �{u�!ZBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�zk�_YThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��~u� ZBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�}u�ZBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �|k�-ZThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�k�+ZThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��u�-ZBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�uSZBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-� k�sZThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�u�AZBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �u�![Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�k�_ZThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��u� [Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�u�[Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �k�-[Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I� k�+[Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.�� u�-[Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a� uS[Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-� k�s[Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y� u�A[Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �u�!\Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�k�_[Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��u� \Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�u�\Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �k�-\Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�k�+\Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��u�-\Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�uS\Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�k�s\Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�u�A\Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �u�!]Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�k�_\Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � �� u� ]Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�u�]Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �k�-]Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�!k�+]Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.�� u�-]Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a� uS]Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-� k�s]Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y� u�A]Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �#u�!^Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�"k�_]Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��&u� ^Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�%u�^Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �$k�-^Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�+k�+^Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��*u�-^Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�)uS^Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�(k�s^Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�'u�A^Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �-u�!_Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�,k�_^Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��0u� _Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�/u�_Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �.k�-_Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�5k�+_Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��4u�-_Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�3uS_Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�2k�s_Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�1u�A_Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �7u�!`Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�6k�__Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��:u� `Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�9u�`Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �8k�-`Thomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�?k�+`Thomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��>u�-`Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�=uS`Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�<k�s`Thomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�;u�A`Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � � �Au�!aBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-6]B�@- core: fix activation of ovs slaves after a service restart (rh #1733709)�c�@k�_`Thomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) r � ��Du� aBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-3^ [�- ovs: allow changing mac address of bridges and interfaces (rh #1740557)�B�Cu�aBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2]�@- dhcp: include conditionals from existing dhclient configuration (rh #1758550) - core: fix sending ARP announcements (rh #1767681)� �Bk�-aThomas Haller <thaller@redhat.com> - 1:1.18.4-1]��- Update to 1.18.4 release - cli: fix bash completion for slave-types (rh #1654062) - core: improve handling of policy routing rules when restarting daemon (rh #1696881) - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960) - tui: only add bond options to profile that are supported by tui (rh #1715720) - cli: fix resetting default value for properties (rh #1715887) - core: fix detecting parent device by connection's UUID (rh #1716438) - core: fix setting IPv6 route options and destination (rh #1727193) - core: support more "arp_validate" bond options (rh #1730793) . ��� � . �I�Ik�+aThomas Haller <thaller@redhat.com> - 1:1.18.8-1^�@- Update to 1.18.8 relase - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754) - ifcfg-rh: handle 802-1x.pin properties.��Hu�-aBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-4^��@- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)a�GuSaBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-3^���- Update translations (rh #1796852)�-�Fk�saThomas Haller <thaller@redhat.com> - 1:1.18.6-2^��- vpn: gracefully handle invalid routes from VPN plugins - workaround g_strtoll() failing with EAGAIN (rh #1797915)�Y�Eu�AaBeniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1^��- Update to 1.18.6 release - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039) - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690) - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566) � � �`�K[�ibSumit Bose <sbose@redhat.com> - 0.8.1-8\��@- Various updates for RHEL-7.7 - many adcli-krb5-????? directories are created /tmp [#1588596] - adcli exports kerberos ticket with old kvno [#1642546] - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911] - Improve handling of service principals [#1644311] - [RFE] adcli command with --unix-* options doesn't update values in UnixAttributes Tab for user [#1337489] - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187] - [RFE] Need an option for adcli command which will show domain join status. [#1622583]�c�Jk�_aThomas Haller <thaller@redhat.com> - 1:1.18.8-2_ts@- Backport OVS related fixes (rh #1871935) - ovs: support changing the MTU of ovs interfaces (rh #1820052) - ovs: fix race condition in setting MAC address (rh #1852106) - �OV � - ��P]�EbSumit Bose <sbose@redhat.com> - 0.8.1-13^ �@- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]��O]�KbSumit Bose <sbose@redhat.com> - 0.8.1-12]o�@- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]�u�N]�bSumit Bose <sbose@redhat.com> - 0.8.1-11]e@- Fixes and improvements for RHEL-7.8 - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745] - adcli update --add-samba-data does not work as expected [#1738573]�#�M]�mbSumit Bose <sbose@redhat.com> - 0.8.1-10]QT�- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab: Cannot allocate memory" [1665162]��L[�5bSumit Bose <sbose@redhat.com> - 0.8.1-9\��- Fixes for RHEL-7.7 updates - additional patch for [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187] - new patches for many adcli-krb5-????? directories are created /tmp [#1588596] � �( � ��U��cFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildV�TaQbSumit Bose <sbose@redhat.com> - 0.8.1-16.1_��A- add missing patch for [#1871436]��S]�+bSumit Bose <sbose@redhat.com> - 0.8.1-16_��@- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]��R]�5bSumit Bose <sbose@redhat.com> - 0.8.1-15^�(@- More fixes for RHEL-7.9 - No longer able to delete computer from AD using adcli [#1840752] - adcli: presetting $computer in $domain domain failed: Cannot set computer password: Authentication error [#1762633]�j�Q]�{bSumit Bose <sbose@redhat.com> - 0.8.1-14^�=@- Fixes for RHEL-7.9 - Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622] - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258] , �t.��\��D � � r , Dp � 73839ad166f5daa6f4e5a2a9b08686fda05962283302afa1963df3b66c4b53e0Do � f9a5378694573063ecf61c516d27731ba3a515cc1b91bfced9a7057634a8d54cDn � 3d9697b9d1df6afe1e6f7753c817927e77aab45d8ae4e6b00aab690614c170a3Dm � 27b3a6d5e1c664607297b18087e7b61c8f79281dcd08b501d6a4a98d0f06ccc1Dl � 2eebe28ab1f164eeb8573869c86de47b750d8a043f1b3897566fe0753003f2a4Dk � 43e5f421e8e3c2fe23f7a93bd002c12ec11faf3194b342d07ee3a9f9fb37a875Dj � dc1ec1c4e74af368428ce982615f87d7121b8baea33bec02313d1f3b501a036eDi � 892fa4df2150169a5c8680af75e4e63f2ffbf5ca0f9dafb19d1928769a5769b9Dh � e291f44f4466940d2b21380d3d68e50016685dad9868bd9563a304233da7eca0Dg � da160f160c233fe77d6e2113aad1a189ed766c41fc8254b49f764306d9538dc9Df � b8b4286c072a6e2914a35c1f9d77c2d2f6fc910361424e0fd362363d7d5d74a7De � 82e901dcdc6ecc6088013e726925ea0a208b449014b09f844465ad5d7b305805Dd � f7e3acc601ed8b9698fbc58cf297b2ad5a49ead168e515f329e2d95f3cd8083dDc � e00e4e27e76a7ce874a947e6df6282be03c80787552e9101d00197dc467c0182 z R�j � z b�\gccRadovan Sroka <rsroka@redhat.com> - 0.15.1-12X���- RHEL 7.4 ERRATUM Resolves: rhbz#1377215��[m�%cDaniel Kopecek <dkopecek@redhat.com> - 0.15.1-11W�@- Corrected typos in the default configuration file Resolves: rhbz#1304334�(�Zm�gcDaniel Kopecek <dkopecek@redhat.com> - 0.15.1-10Wm �- Updated the default configuration file. New defaults contributed by Steve Grubb. Resolves: rhbz#1304334��Yk�McDaniel Kopecek <dkopecek@redhat.com> - 0.15.1-9S�u�- Don't require prelink on aarch64 and ppc64le Resolves: rhbz#1078555 Resolves: rhbz#1125462L�X_?cDaniel Mach <dmach@redhat.com> - 0.15.1-8R�U�- Mass rebuild 2014-01-24L�W_?cDaniel Mach <dmach@redhat.com> - 0.15.1-7R�k�- Mass rebuild 2013-12-27�*�Vk�mcDaniel Kopecek <dkopecek@redhat.com> - 0.15.1-6R|�@- warn if processing prelinked binary objects and the prelink binary is not available Resolves: rbhz#1004826 ^ �%�q�z � ^ a�f_idHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�e]?dDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�d_udJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�c[5dJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B�b[/dJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�acqdJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�`_adJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�_[MdJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldaps�^e�cRadovan Sroka <rsroka@redhat.com> - 0.15.1.1a��@- backported fix for CVE-2021-45417 resolves: rhbz#2041952b�]gccRadovan Sroka <rsroka@redhat.com> - 0.15.1-13X��@- RHEL 7.4 ERRATUM Resolves: rhbz#1400548 S ��f��o � S a�p_ieHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�o]?eDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�n_ueJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�m[5eJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B�l[/eJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�kcqeJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�j_aeJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�i[MeJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��ho�=dLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�g]?dDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 S ��f��o � S a�z_ifHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�y]?fDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�x_ufJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�w[5fJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B�v[/fJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�ucqfJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�t_afJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�s[MfJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��ro�=eLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�q]?eDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 S ��f��o � S a�_igHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�]?gDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�_ugJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�[5gJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B� [/gJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�cqgJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�~_agJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�}[MgJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��|o�=fLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�{]?fDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 S ��f��o � S a�_ihHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K� ]?hDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g� _uhJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE� [5hJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B� [/hJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g� cqhJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�_ahJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�[MhJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��o�=gLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�]?gDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 S ��f��o � S a�_iiHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�]?iDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�_uiJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�[5iJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B�[/iJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�cqiJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�_aiJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�[MiJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��o�=hLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�]?hDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 of zflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� � � � � � � � � �! �# �& �+ �- �0 �5 �7 �: �? �A �D �I �K �P �U �\ �f �p �z � !� "� $�" %�, &�6 '�@ (�J )�Q *�W +�] ,�c .�j /�q 0�x 1� 2� 3� 4� 5� 6�# 7�* 8�1 9�8 :�? ;�F <�N =�U >�\ ?�c @�j A�q C�x D� E� F� G� H� I�# J�) K�0 L�7 M�= N�D O�K P�Q Q�X R�_ S�e T�l U�s W�y X� Y� Z� [� \� ]�! ^�( _�. a�1 b�4 c�9 e�< f�A g�H h�N i�U j�\ k�b l�i m�p o�v p�} q� r� s� t� u� v�% w�, x�2 y�9 S ��f��o � S a�"_ijHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�!]?jDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g� _ujJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE� [5jJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B� [/jJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g� cqjJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]� _ajJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�[MjJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��o�=iLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�]?iDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 S ��f��o � S a�,_ikHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�+]?kDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�*_ukJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�)[5kJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B�([/kJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�'cqkJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�&_akJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�%[MkJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��$o�=jLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�#]?jDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 S ��f��o � S a�6_ilHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�5]?lDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�4_ulJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�3[5lJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B�2[/lJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�1cqlJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�0_alJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�/[MlJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��.o�=kLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�-]?kDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 S ��f��o � S a�@_imHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�?]?mDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�>_umJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�=[5mJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B�<[/mJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�;cqmJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�:_amJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�9[MmJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��8o�=lLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�7]?lDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 S ��f��o � S a�J_inHonza Horak <hhorak@redhat.com> - 1.5.2-5R�x@- Rebuild for mariadb-libs Related: #1045013K�I]?nDaniel Mach <dmach@redhat.com> - 1.5.2-4R�k�- Mass rebuild 2013-12-27g�H_unJan Kaluza <jkaluza@redhat.com> - 1.5.2-3Q���- do not build with freetds when it is not availableE�G[5nJoe Orton <jorton@redhat.com> - 1.5.2-2Qd�- update for aarch64B�F[/nJoe Orton <jorton@redhat.com> - 1.5.2-1Qd�- update to 1.5.2g�EcqnJon Ciesla <limburgher@gmail.com> - 1.4.1-8Q�@- Apply private patch from Merge Review BZ 225254.]�D_anJan Kaluza <jkaluza@redhat.com> - 1.4.1-7P�M@- ensure we use latest libdb5 (not libdb4)Q�C[MnJoe Orton <jorton@redhat.com> - 1.4.1-6P�@- use -lldap_r instead of -lldap��Bo�=mLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�A]?mDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 � ���s � � q�Qe�oTomáš Mráz <tmraz@redhat.com> - 3.1.13-20U���- build the package with hardening flags (PIE, full RELRO)r�Pe�oTomáš Mráz <tmraz@redhat.com> - 3.1.13-18T.��- filter environment variables not acceptable in bash inputM�Oa?oDaniel Mach <dmach@redhat.com> - 3.1.13-17R�U�- Mass rebuild 2014-01-24�?�N{�oMarcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16RΏ@- the correct solution is remove smp_flags, they don't work properly on ppc with the option mpower7 - Related: rhbz#1048745��M{�)oMarcela Mašláňová <mmaslano@redhat.com> - 3.1.13-15Rʚ�- remove old changelogs - ppc fail to rebuild package - Resolves: rhbz#1048745��Lo�=nLuboš Uhliarik <luhliari@redhat.com> - 1.5.2-6.1dZ5�- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64K�K]?nDaniel Mach <dmach@redhat.com> - 1.5.2-6R�U�- Mass rebuild 2014-01-24 c ��Y � c ��W{�)pMarcela Mašláňová <mmaslano@redhat.com> - 3.1.13-15Rʚ�- remove old changelogs - ppc fail to rebuild package - Resolves: rhbz#1048745_�Ve_oJan Staněk <jstanek@redhat.com> - 3.1.13-25b ��- re-import selinux support from upstreamN�Ue=oTomáš Mráz <tmraz@redhat.com> - 3.1.13-24[W�- log the jobs being run� �Te� oTomáš Mráz <tmraz@redhat.com> - 3.1.13-23Y�o@- fix the ownership of the spool directory (#1414228) - document the -n option of atd (#739870) - fix handling of the aborted jobs (due to possibly temporary conditions) and avoid flooding the syslogg�SeooTomáš Mráz <tmraz@redhat.com> - 3.1.13-22WB�- SIGPIPE should not be ignored in atd (#1338039)�d�Re�goTomáš Mráz <tmraz@redhat.com> - 3.1.13-21Wo@- correct the DST correction when using UTC time specification (#1328832) - clear non-job files from at dir and test for write error on fclose to fix bogus syslog messages � =�x � g�]eopTomáš Mráz <tmraz@redhat.com> - 3.1.13-22WB�- SIGPIPE should not be ignored in atd (#1338039)�d�\e�gpTomáš Mráz <tmraz@redhat.com> - 3.1.13-21Wo@- correct the DST correction when using UTC time specification (#1328832) - clear non-job files from at dir and test for write error on fclose to fix bogus syslog messagesq�[e�pTomáš Mráz <tmraz@redhat.com> - 3.1.13-20U���- build the package with hardening flags (PIE, full RELRO)r�Ze�pTomáš Mráz <tmraz@redhat.com> - 3.1.13-18T.��- filter environment variables not acceptable in bash inputM�Ya?pDaniel Mach <dmach@redhat.com> - 3.1.13-17R�U�- Mass rebuild 2014-01-24�?�X{�pMarcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16RΏ@- the correct solution is remove smp_flags, they don't work properly on ppc with the option mpower7 - Related: rhbz#1048745 h ��I� � h s�cuwqCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�bw�5qStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��au�-qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode_�`e_pJan Staněk <jstanek@redhat.com> - 3.1.13-25b ��- re-import selinux support from upstreamN�_e=pTomáš Mráz <tmraz@redhat.com> - 3.1.13-24[W�- log the jobs being run� �^e� pTomáš Mráz <tmraz@redhat.com> - 3.1.13-23Y�o@- fix the ownership of the spool directory (#1414228) - document the -n option of atd (#739870) - fix handling of the aborted jobs (due to possibly temporary conditions) and avoid flooding the syslog , �t.��\��D � � r , D~ � 46604e7e63c82851d300be853fd43bec9f863d6c14a9a404185a9c0fe6b88932D} � 04c1cb44a333186da972033dd6cf11d36780a1631c165568ae8099544c2c1543D| � 7a7b265708dca056a11cfae6ae29db41405f54311ecc3a62636751d2e8044546D{ � cb353d5c74471de09be7e0fd09fe8cc300e96b28268cedc2c0c08e286daf5f95Dz � 8ce3c00b5ddec20bc2e8b9298da33c7143687fe46bc2765f98f31a35a820ac4dDy � 275d7c54ef8b97dfca3a0aeae434bcf2bc9cc690357c78c2944a06043dd90fbeDx � fdff2f1a1756e0f2d41cfa80f3b32907c40bd0172a470e140d1cb91e3b1dbecaDw � 8a6f4b746d5edf5cd1a9c83d8f03ddbe3050f70230be328aa88328d12100ea4bDv � 552aefa94572e48c27a350e1ef2936db101b0d78eba2ef8d8369a651e1bbd1dfDu � cb5931215d156696cbe58219e39202ac72b87128adece13396ffa94ab6dad395Dt � b05cbfb8155501322d2372a41219a106a3f361ad36d86f1e9fcf2f235dd2e63cDs � 0a712b8f1eda25e3f9a256fe884b8e622404b2f830abfa7cb7a720a164b44109Dr � b1fc5ae8c9c372eb9d1971e1612aa3947e2c1b7fb9700813c9c66f35908dd4b3Dq � 56771785cffde9bcf2a1b33447024e6a12a3805c64a69be7e940a45fda1e2824 � y� � � }�jw�qStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�iuiqCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��hu�qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �gu�'qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�fuwqCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�eu[qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��du�qCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS * m� �0 � * � �qu�'rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�puwrCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�ou[rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��nu�rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�muwrCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�lw�5rStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��ku�-rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode $ { ��! � $ ��xu�sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�wuwsCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�vw�5sStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��uu�-sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�tw�rStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�suirCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��ru�rCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck � �"� � � ��u�-tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�~w�sStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�}uisCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��|u�sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �{u�'sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�zuwsCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�yu[sCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 8 (�+�M � 8 ��u�tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�'tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�uwtCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�u[tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u�tCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�uwtCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T� w�5tStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog A �~�0 � A e� u[uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858�� u�uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs� uwuCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T� w�5uStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog�� u�-uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�w�tStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�uitCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��u� � �T�w�5vStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�-vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�w�uStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�uiuCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u�uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�'uCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�uwuCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires ! ��%� � ! }� w�vStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�uivCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u�vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�'vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�uwvCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�u[vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u�vCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�uwvCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor * m� �0 � * � �#u�'wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�"uwwCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�!u[wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858�� u�wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs� uwwCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T� w�5wStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog�� u�-wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode $ { ��! � $ ��*u�xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�)uwxCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�(w�5xStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��'u�-xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�&w�wStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�%uiwCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��$u�wCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck � �"� � � ��1u�-yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�0w�xStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�/uixCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��.u�xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �-u�'xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�,uwxCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�+u[xCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 8 (�+�M � 8 ��8u�yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �7u�'yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�6uwyCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�5u[yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��4u�yCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�3uwyCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�2w�5yStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog A �~�0 � A e�?u[zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��>u�zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�=uwzCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�<w�5zStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��;u�-zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�:w�yStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�9uiyCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ��u� � �T�Fw�5{Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Eu�-{Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�Dw�zStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�CuizCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Bu�zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Au�'zCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�@uwzCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires ! ��%� � ! }�Nw�{Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�Mui{Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Lu�{Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Ku�'{Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�Juw{Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�Iu[{Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Hu�{Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�Guw{Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor * m� �0 � * � �Uu�'|Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�Tuw|Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�Su[|Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Ru�|Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�Quw|Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�Pw�5|Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Ou�-|Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode $ { ��! � $ ��\u�}Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�[uw}Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�Zw�5}Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Yu�-}Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�Xw�|Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�Wui|Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Vu�|Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck � �"� � � ��cu�-~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�bw�}Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�aui}Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��`u�}Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �_u�'}Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�^uw}Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�]u[}Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 8 (�+�M � 8 ��ju�~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �iu�'~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�huw~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requirese�gu[~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��fu�~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�euw~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�dw�5~Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog A �~�0 � A e�qu[Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��pu�Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSs�ouwCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�T�nw�5Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��mu�-Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�lw�~Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�kui~Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black f �s,��W��; � � f D� � 6814c1585ec14edaecfb3a1c411a60fa17aa216d2f668964f68de8ee908ba367D� � 31678e32384951f2d0803f480a17916c8967a20bfa4c0a7b627436b112c717fdD� � 334cdf2e5acff8ba4421fc51d46210b1cc6cca7070a3a55c0b71135ea842a3c7D� � e55f24cd7b3be8300c44b260f1159a66b99a1775ff2fe6134024d8c234f14559D� � 39ac208f2aaeedee724d09ffc9d779294a7721cd83807bbda081d0114bd94acdD� � 5b0b31c3c4aa723f9a677d0ccaea58da6ec37710d6177cb930b490c716240bf8D� � 5d2375f20cc25e073efba76f4aeff505ebc4d30019f64ff6c16696cf30c075d2D� � 64701408bd6314de93c364f1b1a6d1f58f607d97f62aed713456040f9a7d6a21D� � 40e08209c8de5003d4423a0ad7ed9c6b0f8180f4ac00c11d42d96a7a5069ebdbD� � cfeadf715a776582bc168121a31f85069becc17f2556be2c3ea11c7d6040209dD� � 3525be93a809d42aa8d6b8563d5762f4fd6f25a1b228b65589656a65c2bbba4aD� � 29938eb53cc7e9d2d0198a3a51f899d7a6d63659353fc78aac0dd24310a2cd39D � a1186ec734eb9834a2715c84b38c55a5efc049d49063deb03d006c6cbc9dd48c ��u� � �U�xw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��wu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode}�vw�Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorl�uuiCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��tu�Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �su�'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849s�ruwCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires ��!� � ~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��~u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �}u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�|uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�{u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�yuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor # l� �+ � # � �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode z �� � ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog�� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck � � � � � ��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858 1 '�(�H � 1 �� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog : �{�+ � : f�#u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��"u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�!uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog�� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��r� � ��)u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�(w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�'ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��&u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �%u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�$uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires 1 '�(�H � 1 ��0u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �/u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�.uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�-u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��,u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�+uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�*w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog : �{�+ � : f�7u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��6u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�5uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�4w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��3u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�2w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�1ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��r� � ��=u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�<w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�;ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��:u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �9u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�8uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires 1 '�(�H � 1 ��Du� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Cu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Buw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Au[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��@u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�?uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�>w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog : �{�+ � : f�Ku[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Iuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Hw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��Gu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�Fw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Eui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��r� � ��Qu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�Pw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Oui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��Nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Mu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Luw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires 1 '�(�H � 1 ��Xu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �Wu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�Vuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�Uu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��Tu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�Suw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�Rw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog : �{�+ � : f�_u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��^u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�]uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�\w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��[u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�Zw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�Yui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��r� � ��eu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�dw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�cui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �au�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�`uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires 1 '�(�H � 1 ��lu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �ku�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�juw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�iu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��hu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�guw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�fw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog : �{�+ � : f�su[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�quw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�pw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��ou�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�nw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�mui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D� � ac61f136dfa8ec37083c4218f10c4b90438fde96c223895a6e3d08660c0652f3D� � 7cf9167bef9413a9b392bca9faff3196f5c05d3ec73a6d3e2429936ca11db4a3D� � 9fe95cd53733c5ac4fb1ee1e907acf53ce9a1661cc2b2e83a473ca67ae9bfc46D� � 5c57f76aba32a986317ac294945a789bd49f7cd09491d4a66c8c259b336a13dbD� � fbae91cfe9ae73876a8eeb3b715dacaef2f15103aae6c0a6040a7aec6578cc0dD� � 3ec6e9340959cede8f65ef85eb65d48800aad8e51db71b9f3bd47bed04cd9c3aD� � 33aa69d7f9394b9a6d1d03cca5e79975ae42fc6d8a6d1794ebe7bfcf8d3bf01aD� � a27a74e92715fbe40b9a7d67bedad0e62952307a43ea09eecd25aa1667294bd5D� � fdb3d033e3ca54175fbc3432d0eaabe73a06e7062247eadf1c8f79411c315081D� � b5a2b6df0e41a71f9cfd396eaf57386bb3c21a06e22de723d7391c558e82402fD� � cb993c6b41619d0b739c98a53cc2ca52430d470822dc5d7f74a0f2761581971bD� � ffe6c8fe6239af5ba9b802d1110485c57c37832e367d2ff85fa1252c920e1193D� � 03a8c1b34a6e0348a56c5f5c1e6d5f586c514da1b01b442feaf2c7dfec629173 � ��r� � ��yu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�xw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�wui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �uu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�tuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires 1 '�(�H � 1 �� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�~uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�}u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��|u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�{uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�zw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog : �{�+ � : f�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��r� � �� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� � u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires 1 '�(�H � 1 ��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog : �{�+ � : f�u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��r� � ��!u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black�� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� � u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires 1 '�(�H � 1 ��(u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �'u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�&uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�%u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��$u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�#uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�"w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog \ ��� \ �!�.[�i �Ian Kent <ikent@redhat.com> - 5.0.7-111^{G�- bz1806514 - strictexpire option not set for offset mounts - fix patch not applied. - Related: rhbz#1806514�.�-[� �Ian Kent <ikent@redhat.com> - 5.0.7-110^{G�- bz1806514 - strictexpire option not set for offset mounts - also use strictexpire for offsets. - Resolves: rhbz#1806514�h�,[�w �Ian Kent <ikent@redhat.com> - 5.0.7-109][�- bz1728914 - getmntent returns additional "-hosts" entries when automounter is used with "hosts" map - fix missing initialization of autofs_point flags. - Related: rhbz#1728914�d�+[�o �Ian Kent <ikent@redhat.com> - 5.0.7-108]M`@- bz1728914 - getmntent returns additional "-hosts" e `~�*w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�)ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black ntries when automounter is used with "hosts" map - remove unused function has_fstab_option(). - remove unused function reverse_mnt_list(). - remove a couple of old debug messages. - fix amd entry memory leak. - fix unlink_mount_tree() not umounting mounts. - add ignore mount option. - use ignore option for offset mounts as well. - add config option for "ignore" mount option - use bit flags for autofs mount types in mnt_list. - use mp instead of path in mnt_list entries. - always use PROC_MOUNTS to make mount lists. - add glibc getmntent_r(). - use local getmntent_r in table_is_mounted(). - refactor unlink_active_mounts() in direct.c. - don't use tree_is_mounted() for mounted checks. - use single unlink_umount_tree() for both direct and indirect mounts. - move unlink_mount_tree() to lib/mounts.c. - use local_getmntent_r() for unlink_mount_tree(). - use local getmntent_r() in get_mnt_list(). - use local getmntent_r() in tree_make_mnt_list(). - Resolves: rhbz#1728914 k 4�k �9�1[� �Ian Kent <ikent@redhat.com> - 5.0.7-114^��@- bz1847762 - automount program crashes with "malloc(): invalid next size (unsorted) - initialize struct addrinfo for getaddrinfo() calls. - fix quoted string length calc in expandsunent(). - fix autofs mount options construction. -Resolves: rhbz#1847762��0[�7 �Ian Kent <ikent@redhat.com> - 5.0.7-113^��A- Fix changelog revision for previous 2 commits. - Related: rhbz#1806514 rhbz#1818664�H�/[�7 �Ian Kent <ikent@redhat.com> - 5.0.7-112^��@- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign - fix trailing dollar sun entry expansion. - Resolves: rhbz#1818664 q =P q �[�4i�O �Ian Kent <ikent@redhat.com> - 5.0.7-116el7_9.1c�- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems with mount trigger - fix kernel mount status notification. - Resolves: rhbz#2107752�i�3[�y �Ian Kent <ikent@redhat.com> - 5.0.7-116_� A- bz1885511 - automount force unlink option (-F) does not work as expected on autofs-5.0.7-109.el7 - fix incorrect logical compare in unlink_mount_tree(). - Related: rhbz#1885511�?�2[�% �Ian Kent <ikent@redhat.com> - 5.0.7-115_� @- bz1885511 - automount force unlink option (-F) does not work as expected on autofs-5.0.7-109.el7 - fix direct mount unlink_mount_tree() path. - fix unlink mounts umount order. - bz1858586 - autofs share doesn't mount when using nobind over RDMA where nfs-server and nfs-client are the same systems - mount_nfs.c fix local rdma share not mounting. - Resolves: rhbz#1885511 rhbz#1858586 � 3��% � �!�9[�i �Ian Kent <ikent@redhat.com> - 5.0.7-111^{G�- bz1806514 - strictexpire option not set for offset mounts - fix patch not applied. - Related: rhbz#1806514�.�8[� �Ian Kent <ikent@redhat.com> - 5.0.7-110^{G�- bz1806514 - strictexpire option not set for offset mounts - also use strictexpire for offsets. - Resolves: rhbz#1806514�h�7[�w �Ian Kent <ikent@redhat.com> - 5.0.7-109][�- bz1728914 - getmntent returns additional "-hosts" entries when automounter is used with "hosts" map - fix missing initialization of autofs_point flags. - Related: rhbz#1728914�d�6[�o �Ian Kent <ikent@redhat.com> - 5.0.7-108]M`@- bz1728914 - getmntent returns additional "-hosts" e d�I�5[�9 �Ian Kent <ikent@redhat.com> - 5.0.7-107]@1@- bz1734057 - automount segfaults if a bad hosts entry is added in /etc/auto.master - fix reset flex scan buffer on init. - Resolves: rhbz#1734057 ntries when automounter is used with "hosts" map - remove unused function has_fstab_option(). - remove unused function reverse_mnt_list(). - remove a couple of old debug messages. - fix amd entry memory leak. - fix unlink_mount_tree() not umounting mounts. - add ignore mount option. - use ignore option for offset mounts as well. - add config option for "ignore" mount option - use bit flags for autofs mount types in mnt_list. - use mp instead of path in mnt_list entries. - always use PROC_MOUNTS to make mount lists. - add glibc getmntent_r(). - use local getmntent_r in table_is_mounted(). - refactor unlink_active_mounts() in direct.c. - don't use tree_is_mounted() for mounted checks. - use single unlink_umount_tree() for both direct and indirect mounts. - move unlink_mount_tree() to lib/mounts.c. - use local_getmntent_r() for unlink_mount_tree(). - use local getmntent_r() in get_mnt_list(). - use local getmntent_r() in tree_make_mnt_list(). - Resolves: rhbz#1728914 k 4�k �9�<[� �Ian Kent <ikent@redhat.com> - 5.0.7-114^��@- bz1847762 - automount program crashes with "malloc(): invalid next size (unsorted) - initialize struct addrinfo for getaddrinfo() calls. - fix quoted string length calc in expandsunent(). - fix autofs mount options construction. -Resolves: rhbz#1847762��;[�7 �Ian Kent <ikent@redhat.com> - 5.0.7-113^��A- Fix changelog revision for previous 2 commits. - Related: rhbz#1806514 rhbz#1818664�H�:[�7 �Ian Kent <ikent@redhat.com> - 5.0.7-112^��@- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign - fix trailing dollar sun entry expansion. - Resolves: rhbz#1818664 4 =P � � 4 ]�A�5 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.109-1YJ_�- Update to 1.11.109[�@�3 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.90-1Y$$@- Update to 1.11.90[�?�3 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.63-1X�,�- Update to 1.11.63�i�>[�y �Ian Kent <ikent@redhat.com> - 5.0.7-116_� A- bz1885511 - automount force unlink option (-F) does not work as expected on autofs-5.0.7-109.el7 - fix incorrect logical compare in unlink_mount_tree(). - Related: rhbz#1885511�?�=[�% �Ian Kent <ikent@redhat.com> - 5.0.7-115_� @- bz1885511 - automount force unlink option (-F) does not work as expected on autofs-5.0.7-109.el7 - fix direct mount unlink_mount_tree() path. - fix unlink mounts umount order. - bz1858586 - autofs share doesn't mount when using nobind over RDMA where nfs-server and nfs-client are the same systems - mount_nfs.c fix local rdma share not mounting. - Resolves: rhbz#1885511 rhbz#1858586 Q � �� � Q � �Hu�' �Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.23.2-1.1bq@- Rebase to 1.23.2 to fix issues with upgraded libs Resolves: rhbz#2073979�5�Gs�y �Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-5Z���- Append python-botocore and python-jmespath bundled directory to search path where needed Resolves: rhbz#1509434p�Fsq �Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-4Zz�@- Bundle python-colorama Resolves: rhbz#1509434��Es�C �Oyvind Albrigtsen <oalbrigt@redhat.com> - 1.14.28-1Za�- Update to 1.14.28 - Replace python-rsa with python-cryptography Resolves: rhbz#1509434]�D�5 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.133-1Y�?@- Update to 1.11.133��C�� �Fedora Release Engineering <releng@fedoraproject.org> - 1.11.109-3Yx�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild[�B�1 �Fabio Alessandro Locati <fale@fedoraproject.org> - 1.11.109-2YJ_�- Forgot to update � ^�.�" � ��Nw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-31[@- Append '/' while tab completing directory names Resolves: #1495398��Mw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-30Y��- Check for multibyte characters in commands Resolves: #1487615��Lw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-29Y�@- Fix a pipe fd leak in process substitution Resolves: #1473245��Ka�A �Kamil Dudka <kdudka@redhat.com - 4.2.46-28X���- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: #1429838��Ja�Q �Kamil Dudka <kdudka@redhat.com - 4.2.46-27X� @- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables Resolves: #1426026� �Iw�G �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-26X�Y�- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname Resolves: #1379237 i�[�L � ��Ua�A �Kamil Dudka <kdudka@redhat.com - 4.2.46-28X���- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: #1429838��Ta�Q �Kamil Dudka <kdudka@redhat.com - 4.2.46-27X� @- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables Resolves: #1426026� �Sw�G �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-26X�Y�- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname Resolves: #1379237j�Rwa �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-35an�@- Bump version number Resolves: #2015565� �Qw�! �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-34]V��- BASH_CMD should not be writable in restricted shell Resolves: #1693181|�Pw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-33\��- Add support for bracketed paste mode Resolves: #1573901��Ow�1 �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-32\�@- Add configuration option for logging bash history to syslog Resolves: #1160482 W z�i�S � W j�\wa �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-35an�@- Bump version number Resolves: #2015565� �[w�! �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-34]V��- BASH_CMD should not be writable in restricted shell Resolves: #1693181|�Zw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-33\��- Add support for bracketed paste mode Resolves: #1573901��Yw�1 �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-32\�@- Add configuration option for logging bash history to syslog Resolves: #1160482��Xw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-31[@- Append '/' while tab completing directory names Resolves: #1495398��Ww� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-30Y��- Check for multibyte characters in commands Resolves: #1487615��Vw� �Siteshwar Vashisht <svashisht@redhat.com> - 4.2.46-29Y�@- Fix a pipe fd leak in process substitution Resolves: #1473245 p ?�M] p ��b�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-15Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildO�am5 �Tom Callaway <spot@fedoraproject.org> - 0:5.2-14P�6@- Package NOTICE.txt�l�`]�} �Andy Grimm <agrimm@gmail.com> - 0:5.2-13P3x@- This package should not own _mavendepmapfragdir (RHBZ#850005) - Build with maven, and clean up deprecated spec constructs - Fix pom file (See http://jira.codehaus.org/browse/MEV-592)��_�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-12P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT�^q; �Gerard Ryan <galileo@fedoraproject.org> - 0:5.2-11O�@- Inject OSGI Manifest.�=�]i� �Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10O y�- Specify explicit source encoding to fix build with Java 7. - Install jar and javadocs unversioned. - Crosslink with JDK javadocs. I f���; � I ��i�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-12P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildT�hq; �Gerard Ryan <galileo@fedoraproject.org> - 0:5.2-11O�@- Inject OSGI Manifest.�=�gi� �Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10O y�- Specify explicit source encoding to fix build with Java 7. - Install jar and javadocs unversioned. - Crosslink with JDK javadocs.��fo�9 �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-19c��@- Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920L�e]? �Daniel Mach <dmach@redhat.com> - 05.2-18R�k�- Mass rebuild 2013-12-27� �do� �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-17Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571��co�? �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-16Q��- Complete spec file rewrite - Build with Maven instead of Ant - Remove manual subpackage �#� � ��po�9 �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-19c��@- Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920L�o]? �Daniel Mach <dmach@redhat.com> - 05.2-18R�k�- Mass rebuild 2013-12-27� �no� �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-17Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571��mo�? �Mikolaj Izdebski <mizdebsk@redhat.com> - 0:5.2-16Q��- Complete spec file rewrite - Build with Maven instead of Ant - Remove manual subpackage��l�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0:5.2-15Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildO�km5 �Tom Callaway <spot@fedoraproject.org> - 0:5.2-14P�6@- Package NOTICE.txt�l�j]�} �Andy Grimm <agrimm@gmail.com> - 0:5.2-13P3x@- This package should not own _mavendepmapfragdir (RHBZ#850005) - Build with maven, and clean up deprecated spec constructs - Fix pom file (See http://jira.codehaus.org/browse/MEV-592) e �r+��V��: � � e D�% � d6069d49f727f500878d2326ae170486edd57be2ead8d6aa3454e528b9d0cad7D�$ � efe7ae6b25e582508f3ba41e0017ca4b0ffbec80692919abd79c1b54bbb43465D�# � 18b2663b932253d1cd4199938857bde269a7f2c90665ff7782c334d88b68f7b7D�" � 42b68ad1d87236d5de03de1b7d591b6a993c1067b4bb54558ceaa48a68fff9e1D�! � ecbe95651dc59d12d773005ad0f00df91c1b689c1ad0402467603a9ab799c2fbD� � 7200ad28455e7f8044a9521a187ff712e7d782e9a38db84d1c18e9b54e7a9a28D� � 1e67462d537e085a22099169bfc37a18a1e6f210a61839b9e0b229fcde3add6eD� � 1edd338d1d20b130c1a107ea59652842ef0a8167393745468301105b2a59ca6dD� � 76f7044e7f7cf0b257e3f983a0bb8457ed7e60c7c386096fd844e8a43f3614acD� � 10a06eabffcd2d73d1de3fa1821108cbfe10fb4977603c9f495854984a91542bD� � 98c4c14b7a0910ce624cb7b36dfb871441e4dc7f083e2dc7b39b52dfce97238fD� � f023965895ca396ee7837ef741c80807f3fcd4e941fe9b021ef6476083832b31D� � 2a3e32785639d588761d6bf2e56e7121d3b1a72e11b62d59b95a594bbfe19836 � �$� � ��v{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��u{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��t{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�swU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�rwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�q{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��}{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��|{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�z}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��y{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�x{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�w{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�~{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�] � b r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) { ��t�y { �z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) q ��` q � � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) ��!�E � �,�%w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�$w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�#wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�"wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�!wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers C ���2 � C ��,{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�+wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�*wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�){�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�({W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �'{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�&wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase { ��t�y { �z�2{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�1{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �0{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�/wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�.w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�-w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) � �"��# � g�9{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �8{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�7wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��6{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��5{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�4wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�3wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) � �$� � ��?{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��>{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��={� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�<wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�;wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�:{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��F{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�EwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Dwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�C{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�B{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �A{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�@{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake # x�r� � # t�Mwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�L{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�K{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�J{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�I{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��H{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��G{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) w ���� w ��T{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�S{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�R{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��Q{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��P{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��O{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�NwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��Z{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Y{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��X{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�WwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Vwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�U{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��a{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��`{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��_{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�^}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��]{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�\{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�[{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��h}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�g}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��f}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�e}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��d{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�c{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�b{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�n}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��m{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�l{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�k{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��j{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��i{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�] � b r�uwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��tw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�sw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��rq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��q}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�p}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��o}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) e �r+��V��: � � e D�2 � fd7c147bd421d47e6afa077b39fee3edde95b7c1ad7a4371b4271f0aaea8ca13D�1 � 01af8dbfbd06ab846b1473d9c0c02a8f51af1a47c8d92957ff4e5508b3d647daD�0 � 334b38af49e56e5f0435be05785e022ac744d9fb66965fc0b8baeec1fbc47653D�/ � d1092d59f303a24817bad40a23bbaac2dcc1d56beef54c5d1c3d42e225090212D�. � 12356c5566012c75f7cff8722dced224c1aa54d1c80a99482b0c3ec180432929D�- � 4b10b467e7f7d3c03d65a1978142de23e7d3b60c9c6729496eac6cd915d2e83cD�, � 42ff9328e94163ac1555369afb66d510954eee171420041d8a4d8bcf504fe3f8D�+ � 89bf5b84dc71e5ad5f0d9d9867283539d89d67b1aa0c88f54a59c8766c3d2351D�* � ae6ecf30bc0a1b8e2c0c2d8702e3eaf7db4864987e02a301446311ff1594d050D�) � 58d55e76b88d088f5d397d7b1d908c6ffc3f06ec1ee82d97c1383fb167104aabD�( � 1a87cf953d16581b70a51f9c131f6f714e364e0a57dee8b2856b43aad7d89104D�' � 87690efabf1c1904d1640276e18c4a1568f33f6688bfde4c8352defdd62b25d4D�& � 3f9569f5e76f2c85ea0b8843abaa2fe4d295bef235b8e3c6c65588c40bfbaad2 { ��t�y { �z�{{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�z{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �y{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�xwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�ww�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�vw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) q ��` q � �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�~wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��}w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�|wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) ��!�E � �,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers C ���2 � C ��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase { ��t�y { �z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) � �"��# � g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) � �$� � ��#{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��"{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��!{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��*{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�)wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�(wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�'{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�&{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �%{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�${k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake # x�r� � # t�1wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�0{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�/{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�.{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�-{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��,{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��+{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) w ���� w ��8{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�7{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�6{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��5{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��4{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��3{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�2wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��>{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��={� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��<{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�;wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�:wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�9{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) H � �� � H t�Dwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�C{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�?�B}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��A{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�@{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�?{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake w ���� w ��K{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�J{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�I{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��H{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��G{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��F{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�EwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) =�-�' � ��R{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�Q{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�P{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��O{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��N{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��M{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�L}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) � =�,� � ��X{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��W{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)��V}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�U}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��T}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�S}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) n���+ � p�_}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��^}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�]}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��\{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�[{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�Z{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��Y{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) � n�T�p � ��e{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�d{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�c{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��b{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��a{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��`}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) � =�,� � ��k{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��jq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��i}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�h}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��g}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�f}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) n���+ � p�r}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��q}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�p}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��o{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�n{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�m{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��l{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) E n�n�s � E �,�yw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�xw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��vw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�uw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��tq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��s}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) e �r+��V��: � � e D�? � 1039cd93e11117af53816432e691fa32ce9f5c6aef8a37f44ed3c7b1291ba097D�> � b7454eacf95c0a09d97a1463029b82bc777116a9ed468c5edd4c0e8ec75006e6D�= � 1cd733c69fed61cd28bbf528bf31510db3dbaaa4cbc45ab7ed8a654264b298aaD�< � 337b3b492087333d675bf644cd7cab27fad998fd2eb5f3f1064b766e5fbf85c1D�; � dfe4993ac8d4d097c4e5e97fc006d27039a6a3d4cc79f87f4d56c9e79afd3a86D�: � 9c36a1622791ce03d6ac94ea9fa499f523998938199fdd4b31677374da4a1118D�9 � c19e37c8595f0a36840e5ffde24ba2022e36425cc814639db070930027e078abD�8 � 5bc7e489f2286aea26973b124918a70b6f8f29e9936508ee68e5fa89b453002bD�7 � ee52c09ab7dca8a8e11fe87c0855b1ce38df1fdaef899e8ce50d80b72009b62bD�6 � 5ea154c824570a42b00ec0dd66ecba1eb3ba53a7d8875b374a32bfc093aea76fD�5 � e27571469712e3c2e9c26aebde7261eee92c600cc19e6d3f6b1bc172f0234ab4D�4 � 5171be56dca06ca1e7da429b0b918c643f00522f432cfaa4d67aeea0ee796306D�3 � f82ec6b5a321f21916898763958f2f66aa27af989f717611ee77da7475cd01db 1 ���2 � 1 �� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)t�~wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�}{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�|{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�zwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase � ]�n g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) b �� b �,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) E ���2 � E ��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase � ]�n g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) # �$�1 � # [� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�'wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��&{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�%wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�$wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�#{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�"{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �!{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�-{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�,{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �+{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�*wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�)w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�(w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �4{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�3wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�2w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�1w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��0{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�/wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�.wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�;w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��:{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��9{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�8wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�7wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�6{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�5{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�BwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Awu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�@{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�?{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �>{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�=wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�<w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�Iwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�H{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�G{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �F{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�EwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��D{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��C{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�Q{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �P{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�OwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�N{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��M{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��L{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��K{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�JwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��W{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��V{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��U{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�TwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Swu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�R{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��^{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�]wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�\wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�[{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�Z{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Y{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�X{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�d{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �c{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�b{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�a{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��`{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��_{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��j{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��i{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��h{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�gwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�fwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�e{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��q{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�pwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�owu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�n{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�m{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�l{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�k{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� {�F |�M }�T ~�Z �a ��h ��n ��u ��{ �� �� �� �� �� ��# ��* ��1 ��8 ��> ��D ��K ��R ��X ��_ ��e ��k ��r ��y �� �� �� �� �� �� ��' ��- ��4 ��; ��B ��I ��Q ��W ��^ ��d ��j ��q ��w ��} �� �� �� �� �� ��% ��, ��2 ��8 ��? ��E ��L ��S ��Z ��a ��h ��o ��u ��| Ð Đ Ő Ɛ ǐ Ȑ& ɐ, ʐ2 ː9 ̐? ͐E ΐL ϐR АX ѐ_ Ґf Ӑm Ԑt Րz ב ؑ ّ ڑ ۑ ܑ" ݑ) ޑ0 ߑ7 �= �D �K �R �Y �a �g �n �t �z � � � � � � � x�rf � g�w{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��v{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�u{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�t{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��s{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��r{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) e �r+��V��: � � e D�L � a9b560ad84f4c4da2302f2f1c1581df4d699c0e0f9cf0754e125b2bab6ea4795D�K � 28d32718cac59baf9c4162573d291af2345e664d16de912661fa18de7157ca63D�J � e0386a64a095ddfdf29e498080b5d77f7bb681d49c55cf461188e3263c1ab429D�I � 94b92924f85680ecbc45ab163f775966e4511c2f9885c4c80f5e90d414a6b7edD�H � 92aef4b8e3ee011c2535abd3662b5231c16dfc9b45c3e7649a1a6b3355518f1bD�G � 7a15e89049ae929f16d7970980522d53b696c61a5d5ce15d47c614ac40e4e05cD�F � af6f8cc2f0f6c25b367a6731610bc84784ff7ff2b8355c606556d449c930b965D�E � a09beb8f5ef98b4539f6e145b9e6318297e4159b1e5234b77768dd9c5b344039D�D � 13955770f0ef1cb7ca5e13e21afb4cd0cce8b0b1d8181ffddb7f3fd4fad797e1D�C � 2eeaafbd3cb22d15a16eddd840a62f042636325ea6009b82fbb72f520fc834b2D�B � ad66c6e64486ef32978fa8bc2e30651674507fed936596d70705e9e334965f98D�A � 7a8a2950c90f28d4e41ed775b9ba97a61e78927e387a936edd2bb1ccadd3bdc7D�@ � 7e64442436c5c1978be36615d69bc4f59a79cef4c9a5819e922bc16f290cdc13 � �$� � ��}{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��|{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�zwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�ywu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�x{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�~{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � �� }�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?�%}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��${�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�#{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�"{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��!{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�,{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�+{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��*{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��){� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��(}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�'}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��&}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��2q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��1}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�0}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��/}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�.}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��-{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � x�rf � �?�8}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��7{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�6{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�5{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��4{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��3{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�] � b r�?wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��>w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�=w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��<q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��;}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�:}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��9}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) { ��t�y { �z�E{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�D{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �C{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�BwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Aw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�@w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) � ��� � � [�LwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Kw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Jw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Iwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Hw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Gw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)t�Fwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) o� � {�Sw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Rwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Qw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�Pwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�O{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�N{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �M{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�ZwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Ywu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�X{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�W{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �V{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�UwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Tw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�a{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �`{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�_wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�^w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�]w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�\wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��[w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�hwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�gw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�fw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�ewq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�dwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�cwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�b{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�owq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��n{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�mwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�lwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�k{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�j{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �i{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�u{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�t{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �s{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�rwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�qw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�pw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �|{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�{wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�zw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�yw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��x{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�vwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) e �r+��V��: � � e D�Y � 36ae65670b57a81f320f0e21426f30d359715f401c51ab27568393a36e6d75aaD�X � 60b33a8a989840613908660e2204def7a4fe9b0d9cbcdf16e46b65bfc1c9bb2cD�W � f3e24a8285c55480cfef6e63c976be0f143c1010b3511cdb0c8f2bc86dd82ef4D�V � b9d806c4557aff349da1d626e32967c4202becbc72147a2c93ba8a440c08995cD�U � ef26f87d833891a36ec1eeac1cbd5de9be6729295a8243544f11a26a7e28373aD�T � bd09bb37e73e22a5b20339a2eafaa7a10698dd1ebf5a8bf4c187d59b68d06a60D�S � 56cdf3051f5fd87ff809ab1843192abe235c6093bc0a83213f73bb7ebe2a0f2aD�R � e87be7552176482fd5e981021e62d2dab6c7950108f44af47af3d68b9fa442a8D�Q � e8843e39d98b4c77a9cab62b23793b825c2c78175ae84da344250acedf05778eD�P � ddbc53b44a7ec6dd175840df4ba96e8440a167aca06195e38f9ce8e768f82f30D�O � 620e6945f7639eacc1508005775c37d66e64ae3f5ec915e87d132a17a45d3999D�N � 84515e054cf47fee3e466382e25e19eb92f6f9947741105ea5f6071f7fe18185D�M � b7958e30f90b1219e2202114385b2a92aa2271e3064f4b5e46ba9f99c2beeef9 , ��!�2 � , {�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�~{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�}{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � �� {�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��&{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�%wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�$wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�#{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�"{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �!{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q� {k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�,{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �+{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�*{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�){k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��({�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��'{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��2{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��1{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��0{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�/wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�.wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�-{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��9{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�8wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�7wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�6{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�5{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�4{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�3{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�?{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��>{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�={c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�<{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��;{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��:{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��E{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��D{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��C{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�BwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Awu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�@{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��L{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�KwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Jwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�I{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��H{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�G{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�F{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�R}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��Q{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�P{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�O{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��N{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��M{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��X{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��W{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��V{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�UwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Twu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�S{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��_{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��^{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��]{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�\}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��[{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�Z{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�Y{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��f}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�e}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��d}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�c}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��b{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�a{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�`{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?�m}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��l{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�k{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�j{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��i{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��h{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��g{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�t{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�s{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��r{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��q{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��p}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�o}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��n}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��zq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��y}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�x}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��w}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�v}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��u{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) e �r+��V��: � � e D�f � 9840fc5d69627a908ae29e24dc640f83ad9be6b88a9779079293c46cd56d1fa5D�e � e08149c8f4894437d1cb9d2b60f6771c7922cc3b83c5f92705e75f509b048115D�d � 5af6b82a47585513d5a6a8ccc974d524ebc2a67fba642652aa75b566045b004cD�c � d1270ff691bc97bc9a737c8556081408a04f2a325ffb0db2fb561a7add15d0e6D�b � 64c82c743b0aa34d2ad89724607562e8cf196bdaec58dcfd940a8f728ce9c754D�a � e9c3f41aecb56447424691a9aedff1c7449cb17f5a1e759c6f7c7c089b2d1adfD�` � 6df17149302a2cb98a128880ea6df6fe1092d0cd169dda5bd470cf1dc5c73494D�_ � f23ad28777ef3020a0b4c72141bc0d367c9a60a8eca144eafcef471df349d126D�^ � 0f6bed5732bc76bfe3e0c85d59ade8d7716ebb9113974ea0d93511212d1907dfD�] � f9112352a12b79f2772b0d357f993f93cfbadb96eb79b1c1b7ea2072dad1e32aD�\ � 80e8a702983be224224c674404dfed4b8a89aa2c699a0bb3c32dc8c20f0219c9D�[ � 6cb04e523ff2e6b8d60ef0c4e8df263d8d56af10fd076b4510daa749d0d1b65dD�Z � 5b81f0de16b9e09141c5ea31f902a18f54277c2e168b86007146e71b8f29b163 � x�rf � �?� }� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�~{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�}{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��|{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�] � b r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��q� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) { ��t�y { �z� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) � ��� � � [�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) o� � {�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�"wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�!wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�){W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �({�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�'wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�&w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�%w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�$wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��#w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�0wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�/w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�.w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�-wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�,wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�+wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�*{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�7wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��6{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�5wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�4wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�3{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�2{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �1{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�={�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�<{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �;{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�:wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�9w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�8w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �D{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�CwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Bw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Aw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��@{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�?wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�>wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�Kw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��J{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��I{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�HwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Gwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�F{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�E{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�RwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Qwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�P{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�O{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �N{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�MwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Lw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�Ywu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�X{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�W{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �V{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�UwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��T{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��S{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�a{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �`{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�_wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�^{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��]{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��\{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��[{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�ZwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��g{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��f{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��e{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�dwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�cwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�b{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��n{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�mwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�lwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�k{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�j{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �i{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�h{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�t{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �s{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�r{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�q{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��p{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��o{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��z{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��y{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��x{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�vwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�u{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�~{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�}{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�|{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake e �r+��V��: � � e D�s � c779ed4a8b7cd8df613f47c214050d61ac25927ab97381ffb59944fb998585ffD�r � c9392783583e0597ccdfaf17dae6fee1b00c3d8da0cb91842328276045fb62a5D�q � 7b3d8994d78928ac66011137e013e2d788ecc7712d592ce7c08306cfd1728489D�p � 90290c5f2092315060a14a82b7d692c91c1f7a1b307ffd574420dbe3936b6177D�o � df8d2506c03d24e1a590d6879a32d25fc08c64674c5b3363908407344377e1ddD�n � 05e34813e9daef9255f5e02eb2c3753c5308d070ffe9608abf8367fedeff8e2dD�m � 1aa586cd752451a887e64054c0eda881403fbc6b7e9c6079ce1e356a839fd225D�l � defc20ca4fb42304e9222b189cd76864191e45eb95df7eb3cb3ba3efd335419fD�k � f292ac03827b0d517e0873201d36bd5f7899da820fe99fba7955de328d3e2773D�j � 6335456bae4a6531a1e5a588c09b5fa47d70ef61f6374951aca147a452b4eb02D�i � b3204ebd71ad924147ec931e26a4e2b1126596abc3c240218c3fa6304427d289D�h � 33233f04e60e9c664a7bf40da5737db125bcf521206e43d06261d80d1b4babe3D�g � ebf8758838f5dc246c98cc6f76706eafa07a5083df17f4fbfa2489df5db98458 � x�rf � g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � �� {�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � �� {�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��'{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��&{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��%{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�$}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��#{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�"{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�!{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��.}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�-}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��,}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�+}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��*{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�){c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�({k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?�5}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��4{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�3{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�2{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��1{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��0{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��/{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�<{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�;{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��:{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��9{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��8}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�7}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��6}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��Bq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��A}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�@}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��?}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�>}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��={�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � x�rf � �?�H}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��G{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�F{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�E{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��D{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��C{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�] � b r�Owq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Nw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Mw} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��Lq� �Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��K}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�J}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��I}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) { ��t�y { �z�U{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�T{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �S{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�RwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Qw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Pw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) � ��� � � [�\wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�[w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Zw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Ywq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Xw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Ww} �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)t�Vwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) o� � {�cw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�bwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��aw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�`wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�_{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�^{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �]{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�jwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�iwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�h{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�g{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �f{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�ewC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�dw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�q{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �p{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�owC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�nw�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�mw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�lwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��kw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�xwC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�ww�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�vw� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�uwq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�twU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�swu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�r{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�wq �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��~{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�}wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�|wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�z{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �y{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) e �r+��V��: � � e D� � f48ce4d917bdd2d6d5ec5a6aa18216b99e980b86d7308d6e535eafb38aa0fbfcD� � f13d76a0cbcea5bf7f05f28bbb2ad0ca59d71e977f1c3f3c544f403d4f947794D�~ � a1b74be1d5a4cc7822e76a9f4d891bbacc535194cb8b1f766c6b04f42b2e443aD�} � e7ad03734c0fc0d4d420d177cc82478f12f8c7fcb1b49294d3f686e186915e9bD�| � 3d75be4567f3055d6aa45834620c4fdab40240d0eac958aa3b5401832cf284bbD�{ � dca184c57d0913cdde1f9f39c446f2cad1f8daa197d290e0f0ee296dc3b345daD�z � 3c96054de3771395180ce2ef6da4dfcd565ee2d14573da0adad58ff76b63d77aD�y � 31deb0ef8475cdf1766d7273df81d1e80842c260ddc7eac34364361b4b00b974D�x � 2c72fd0a8014e13440ebde0c0ae037cea29cc8aa567b3723619486dc2040f9e5D�w � fc93fa73ee589349b26030b1fd56173975859786d624ddeaf826606e99c8b4f3D�v � 0f79393bd746c2a784972b1db928fdca74d0c0324e00a1859ceede81d1af8b93D�u � 8e85466eac6dba299f3f8211333d50827e103a67a8296884c3d1d1a87ce8a828D�t � 43570d8e293bd93001cb8c4cac3e4b2045b3024b7f3e08f4449735bfb9d206c6 { ��t�y { �z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,� w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�w� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�!wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�� {� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�){W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �({�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�'wC �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�&{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��%{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��${� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��#{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�"wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��/{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��.{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��-{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�,wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�+wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�*{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��6{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�5wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�4wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�3{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�2{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �1{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�0{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�<{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �;{�! �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�:{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�9{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��8{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��7{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��B{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��A{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��@{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�?wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�>wu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�={�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��I{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�HwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Gwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�F{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�E{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�D{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�C{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�O{W �Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��N{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�M{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�L{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��K{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��J{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��U{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��T{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��S{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�RwU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Qwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�P{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��\{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�[wU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Zwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�Y{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��X{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�W{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�V{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�b}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��a{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�`{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�_{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��^{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��]{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��h{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��g{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��f{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�ewU �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�dwu �Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�c{�{ �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��o{�# �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��n{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��m{� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�l}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��k{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�j{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�i{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � �� � ��v}�! �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�u}g �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��t}�9 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�s}� �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��r{�7 �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�q{c �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�p{k �Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?�}}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��|{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�z{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��y{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��x{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��w{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� }�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��~}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) e �r+��V��: � � e D� � 7d49e6164c17d7539dfdc7b2354026cb06b6ee0a32b0c9218ac3d8960f348534D� � f9e741d7af4fbcb102cf759697c858701bf8839ced08a5f62c9415ac5de9dda3D� � 23886775cbbf0f0b980d7e700a1fa3cce9ae8149522a191554e770fe0acf1813D� � 0d291da8585bc5dc3d72a81e494c64767eb04ba5a938f0847121edded2bcbdecD� � 2974a1f35f8a1dbd3f46361c76fee7876402f098199e8208407a59471c892340D� � 5380ad090ba99c100379b2fc1cf54a62f85cdfe390b04b6e5e0fe4c213aa4661D� � 43a8791d748c2ca3cb5e8c1b6682319313b8373bb0e84e9e545ba09dc9e093bbD� � 012bfa8eacdc2cdef0742df38d48737a13ab8171afc5020ef127dc81084a68b5D� � ffa04ef798ab2e5815f659306b1ff16a316bf5e5501788e7e0bdda2800e8afd0D� � 6164453fc73f06d895ca8df581d46682883daa8322bdf6c511c25bd367caea15D� � 808073e5962f5fd81e0f89ce66bccad77dea549a509cf522580257f973f2dbe4D� � 72ab9b204a4a984bb758843741ab139089f24553cac0336f08a7b1d1029030aeD� � 9339fa8d6974fa8dfc8e28dbe75760c7c49d355183c0f71b2e5d7d7ea2db67dc y d�� � y �� q�Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � x�rf � �?�}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�] � b r�wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��q�Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) { ��t�y { �z� {�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) � ��� � � [�$wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�#w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�"w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�!wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x� w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)t� wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) o� � {�+w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�*wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��)w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�(wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�'{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�&{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �%{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�2wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�1wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�0{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�/{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �.{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�-wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�,w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�9{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �8{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�7wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�6w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�5w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�4wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��3w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�@wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�?w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�>w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�=wqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�<wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�;wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�:{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�GwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��F{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�EwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�DwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�C{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�B{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �A{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�M{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�L{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �K{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�JwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Iw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Hw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �T{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�SwC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Rw�c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Qw� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��P{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�OwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�NwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�[w� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��Z{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��Y{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�XwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Wwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�V{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�U{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers of gflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �. �5 �< ��B ��H ��O ��U ��\ ��c ��j ��q ��x �� � � � � �! �) �/ �6 �< �B �I �O �U �\ �b �h �o �v �} � � � � � �$ �+ �2 �9 �@ �G �M �T !�[ #�b $�i %�q &�w '�~ (� *� +� ,� -� .�$ /�+ 0�1 1�8 2�> 3�E 4�K 5�R 6�X 7�^ 8�e 9�l :�r ;�x <� =� ?� @� A� B� C�& D�, E�2 F�9 G�? H�F I�M J�S K�Z L�a M�h N�n O�t P�{ Q� R� T� U� V� W�# X�* Y�0 Z�6 [�= \�C ]�I ^�P _�W `�] a�d b�j c�q d�w e�~ f� P�a� � � d�bwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�awu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�`{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�_{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �^{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�]wC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�\w�c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�iwu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�h{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�g{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �f{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�ewC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��d{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��c{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�q{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �p{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�owC Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�n{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��m{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��l{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��k{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�jwU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��w{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��v{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��u{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�twU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�swu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�r{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��~{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�}wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�|wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�z{W Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �y{�! Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�x{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) e �r+��V��: � � e D� � ef23d81c590cbf657f32525eaf60a72a65cac4272b7cfa37677546ee5204deb1D� � 44e365718f57aa02dbc0e6c0f884b3e6dd15e03acd28ab5154d917184b1d05ceD� � 417df6c01f4373a219da10ea1df04e2565b5b27e4710818aa6718065c174f25fD� � fad06e13ad887025495d47068294bf443e6c6209bbb16324fa1b3eb9ef5a885eD� � 4cfa5141393a1004bc9d7885fee9a606293ee21216066238700f933afd5e4598D� � 9339296f633515808554bf8032f56569d2f34d4c9a34b1d71f968cd560dfc9e2D� � 64d39cb55589918f3c7cc7eebfd7ff6020fe1f126e87eb124bd3399e6a321938D� � 8f9c62b62ee309f73ecbf3c62a51cb3d3b553a7505e51047083926355d41e0cdD� � 898a882b2bfc15fc532825fa940804005432ab222c1efaacec472c1c18aa8c66D� � c5debfa2df24c434430b601b89c524d821308d5207f350610e556a17360391b5D� � 46f776adf7f88106a8e818889463dd616d261bb3462ec68346857a126aee742eD� � 5105577688287233ec925ee639d92524c00f6f7490e2c5501c49eeb0f07cd511D� � 802a7e88deb752607d0e6f0f44f099a1dfee4747bd86101389d25eccf2a9ebe8 � �$� � �� {�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm� {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � �� {�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��${�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�#wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�"wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�!{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�� {�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rf � ��+{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�*}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��){�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�({cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�'{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��&{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��%{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�1}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��0{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�/{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�.{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��-{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��,{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) _ b�]�C � _ m�8{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�7{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��6{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��5{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��4}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�3}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��2}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��>q�Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��=}�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�<}gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��;}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�:}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��9{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) m ��� \ � m � �E{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�DwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Cw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Bw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�AwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��@w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�?w}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�Kw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�JwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Iw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�HwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�G{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�F{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�RwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�QwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�P{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�O{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �N{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�MwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Lw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) � ]�n g�X{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �W{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�VwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Uw�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Tw�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�SwqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) n �$� n �,�^w�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�]w�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��\{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�[wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�ZwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�Y{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) C ���2 � C ��e{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�dwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�cwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�b{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�a{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �`{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�_wCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase C x� ! � C d�lwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�kwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�j{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�i{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �h{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�gwCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��f{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�^�Y � g�r{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �q{�!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�p{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��o{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��n{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��m{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � �$� � ��x{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��w{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��v{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�uwUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�twuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�s{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�~wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�}wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�|{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{{WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�z{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�y{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z�{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) e �r+��V��: � � e D�' � f4a5bde79d6cee985d2f0ff8727b2428ec15fbdd03adaa9733b09f7b173c01c7D�& � 87c1a04fd7037d13c6be98a8a975ef7a41eec66aa9031b781b61eabe9107ce9bD�% � d97cd106cf9572dc73237ecabf174c9e7fd63f1831ecd180582edfe2ee993409D�$ � 29afed10faa9e050e9b84ade3202f51f3836b8d12289ddbf91099a716ea0838cD�# � 8b2f892532b5441db04bb9a1d3ad5ae901202de8ca4725355c38b6ac842c3f60D�" � 1a86cce369d4fa519dc82e79409e0ff8f027575c7dd5f588f2c3ca8ed78e840bD�! � ec694ed3c68742fc4ff18e183f1eb03790bcac0cf47880b2b25ad5ac15c207f6D� � 014f5bd144904dc6d27a7fe4b1819401d5f70ea084c8f04cf734fc30dd3fcfacD� � 68dca12ceecda33b2f945d88f466ab32954ff89b462395ef6346d95a47ea375eD� � 3f67c1b26c1f278f9f7675269681e617b83498e50e541a04d9a936a563d20506D� � 4ff754e3b0277c5062fbf7116cde18b1ff4c39ef530dd4fecc189d221739fe28D� � 7266766000b531cf157295f474f17dcfde3f6c02dca1c64d75e027774c33560fD� � 5b90034629bafae7fc40e3688bcd096834f9ce5de48a7f47ccb507c4f1c06c93 � �"�� � m� {cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) = d��, � = ��{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{ Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�?�}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) x�rf � ��{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?� }� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) G b�]�M � G q�&{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��%{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��${� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��#{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)��"}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�!}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��,}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�+}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��*}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�)}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��({�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�'{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � x�rf � �?�2}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��1{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�0{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�/{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��.{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��-{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) J b�]�P � J q�9{k Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��8{�# Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��7{� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��6q� Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��5}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�4}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��3}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��?}�! Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�>}g Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��=}�9 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�<}� Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��;{�7 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�:{c Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) y { z� � y [�FwC!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Ew�c!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Dw�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Cwq!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Bw�!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Aw}!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��@q� Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) o� � r�Mwq"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Lw�"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Kw}"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)t�Jwu!Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�I{�{!Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�H{W!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �G{�!!Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�S{�{"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�R{W"Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Q{�!"Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�PwC"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Ow�c"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Nw�"Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) q ��` q � �Z{�!#Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�YwC#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Xw�c#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Ww�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�Vwq#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Uw�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�Twu"Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) A ��!�4 � A {�aw�$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�`wq$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��_w�$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)d�^wU#Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�]wu#Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�\{�{#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�[{W#Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�hwU$Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�gwu$Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�f{�{$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�e{W$Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �d{�!$Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�cwC$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�bw�c$Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) � ]�n g�n{W%Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �m{�!%Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�lwC%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�kw�c%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�jw�%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�iwq%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) � �$�' � {�tw�&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�swq&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��r{�%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�qwU%Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�pwu%Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�o{�{%Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) P�a� � � d�{wU&Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�zwu&Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�y{�{&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�x{W&Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �w{�!&Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�vwC&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�uw�c&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) � x�J�[ � g�{W'Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!'Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�~w�c'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�}w�'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��|{�&Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � �$� � {�w�(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{�'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU'Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu'Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{'Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) e �r+��V��: � � e D�4 � 8df89d78d785928efa5b8d059e96ce33ffe0c9356663c9acb50ce3ec8c660d92D�3 � 0a8d2dafb528818f6b019015fbaf8cdd2fe3b6535d85da90f6a1db984b828e8eD�2 � 9e6c9b4224affd5105ee5ffe4355eb2e09681fde2148ce946769e1c4583a360bD�1 � 5acc0609a41df6553c86c09d5b59189c6442930ac603ef8674a29954ae4a3fd3D�0 � d6562a8f4c336171a1c63516de07f7e1ff14168c67b6aa0b7065c624836896f7D�/ � 8e8d874e43fcfca807986a24918c2f7b0c82f04d8a0ca32bc0d9523000380ae8D�. � f59dc733e2e61cc262d571504ef9b62561aab27935f5cc432e2109e165936dacD�- � 3997f8bf7bec69e2b9fc0ff0a33790347a77cd30140b40f7b9a36ae91591d36eD�, � f9eddb4d96fec5e873cef47d5028d8ef2534235e25948f0010a17f3da79f7835D�+ � b2b7af7c6537a7e10965b0b999532c5684afc0b6d255efc2b50da0c38e3f168aD�* � 9744361dc7129978289b5a40fcacd9f52369b57774ec2256bc3c078d4d6e8f03D�) � f0c0b3f210497c3d560f42df97307f09afe0cd687c2e08ebc1cb7b03e28b8319D�( � 54904b5dad92e58cb221e767835398cc72621bab301b2d3964a854595d9e6d60 P�a� � � d�wU(Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu(Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W(Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!(Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�wu)Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W)Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!)Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{�(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�(Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g� {W*Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!*Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�{k)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�)Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU)Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��#{�#*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��"{�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��!{�*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU*Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu*Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��*{�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�)wU+Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�(wu+Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�'{�{+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�&{W+Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �%{�!+Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�${k*Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�0{W,Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �/{�!,Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�.{c+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�-{k+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��,{�#+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��+{�+Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��6{�#,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��5{�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��4{�,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�3wU,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�2wu,Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�1{�{,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��={�-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�<wU-Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�;wu-Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�:{�{-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�9{W-Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�8{c,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�7{k,Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�C{W.Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��B{�7-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�A{c-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�@{k-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��?{�#-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��>{�-Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��I{�#.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��H{�.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��G{�.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�FwU.Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Ewu.Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�D{�{.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��P{�/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�OwU/Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Nwu/Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�M{�{/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��L{�7.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�K{c.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�J{k.Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rf � ��W{�0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�V}�/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��U{�7/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�T{c/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�S{k/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��R{�#/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Q{�/Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�]}�0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��\{�70Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�[{c0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�Z{k0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��Y{�#0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��X{�0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) _ b�]�C � _ m�d{c1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�c{k1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��b{�#1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��a{�1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��`}�!0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�_}g0Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��^}�90Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��jq�1Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��i}�!1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�h}g1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��g}�91Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�f}�1Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��e{�71Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) m ��� \ � m � �q{�!2Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�pwC2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�ow�c2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�nw�2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�mwq2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��lw�2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�kw}2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�ww�3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�vwq3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��uw�3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�twu2Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�s{�{2Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�r{W2Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�~wU3Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�}wu3Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�|{�{3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{{W3Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �z{�!3Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�ywC3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�xw�c3Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) � ]�n g�{W4Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!4Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w�4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wq4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) n �$� n �,� w�c5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w�5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��{�4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU4Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu4Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{4Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) e �r+��V��: � � e D�A � 26e0a18b1adcde25239343e4537dc1023fada0ed64e1d72e8b7a98ac795d90deD�@ � 1b0d419b8d0ecbbebdaf88198d39462c8f0babefb9b711f46865cfaaf19e8ad2D�? � ffc1d3cbc957771182427d3972e83824283b43b4272f105619d32ec0195171ceD�> � c9ec93a5f3a15917b5ceeb7e19b67519e6e4ed8b7b2df39dc7999cf6d9f4c5e5D�= � 5cbb74a2688de09192fd42f0956329cbe2c77efa2ec5ed4d5dd90ffcdd07f898D�< � 5fe18b0b420aaf810ed5edcf1e1fd4fa93b6639632315bdd9348ecd11d6dac60D�; � 4f490fc935e1622edd8f29833cff99546eda921facd62b71d30c95acefada869D�: � e9c57b29838349dee4d11ec1d130cd0d7b3fb5df669721f178440fd42a507752D�9 � 5272f52e8e18d2702e48f4c1ff860fc6d052acf1543d9556f54efa55bbe31535D�8 � 913377ddeda7e9a87688016fb775cfe7ac678ed7b17cab277996497a766e6c67D�7 � bd2c5200554793773e752c3edacd8567d9f6db98bf2bc3399bb18086f6b771e8D�6 � 4d2dbd65fa67b8c23648a188f830340cc1da72b5dbc71795229022de0ff9720dD�5 � b524427963041d0c49036598caa6da026b76085863c14fdbec1466146a3b137a C ���2 � C ��{�5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU5Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu5Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {W5Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!5Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[� wC5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase C x� ! � C d�wU6Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu6Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W6Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!6Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{�5Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�^�Y � g� {W7Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!7Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q� {k6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�6Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � �$� � ��${�#7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��#{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��"{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�!wU7Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu7Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��+{�8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�*wU8Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�)wu8Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�({�{8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�'{W8Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�&{c7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�%{k7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z�1{�{9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��0{�78Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�/{c8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�.{k8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��-{�#8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��,{�8Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �"�� � m�8{c9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�7{k9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��6{�#9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��5{�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��4{�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�3wU9Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�2wu9Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) = d��, � = ��>{�:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�=wU:Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�<wu:Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�;{�{:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)�?�:}�9Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��9{�79Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) x�rf � ��E{�;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�D}�:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��C{�7:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�B{c:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�A{k:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��@{�#:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��?{�:Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�K}�;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��J{�7;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�I{c;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�H{k;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��G{�#;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��F{�;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) G b�]�M � G q�R{k<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��Q{�#<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��P{�<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��O{�<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)��N}�!;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�M}g;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��L}�9;Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��X}�!<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�W}g<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��V}�9<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�U}�<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��T{�7<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�S{c<Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) � x�rf � �?�^}�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��]{�7=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�\{c=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�[{k=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��Z{�#=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��Y{�=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) J b�]�P � J q�e{k>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��d{�#>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��c{�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��bq�=Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��a}�!=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�`}g=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��_}�9=Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) � ��1� � ��k}�!>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�j}g>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��i}�9>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�h}�>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��g{�7>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�f{c>Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220) y { z� � y [�rwC?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�qw�c?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�pw�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�owq?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��nw�?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�mw}?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��lq�>Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828) o� � r�ywq@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��xw�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�ww}@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)t�vwu?Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�u{�{?Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�t{W?Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �s{�!?Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�{�{@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�~{W@Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �}{�!@Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�|wC@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�{w�c@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�zw�@Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) q ��` q � �{�!AArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�cAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w�APetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wqAPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w�APetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t� wu@Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) A ��!�4 � A {� w�BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wqBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� w�BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)d� wUATomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wuATomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{APetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WAArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers e �r+��V��: � � e D�N � bc1b8404e2707eba59addc78201595f614f7350f97cf87e924e6f6dbac90b3c3D�M � 2953e2a9ba9042a9c5ebb93523d595d91f7367d8b83dc5b40a473e85572478b2D�L � 0f0f20e5079748f9103ff3e0068108043ec9079822de5e46263c2c1f09b6dc0dD�K � c0a3bcd41e5beba5e539861177a8ed67f9626d4b21b11ab1b621770a53bf3137D�J � 43e8db14504b7b1b92c33224717880dd9e4ea6101787efd5f0da89bc9bf2d7a0D�I � ebbfadfcdd945e3b5ae40adb51fb4d444facc09bdd9f9cc989542bfed2cdee60D�H � 5ca5234e59243cc5ced75e11bc9ad434a82d86c5fa5eab71a130bd3c3ae49334D�G � d4718c0bcf9365bfcd07e9c307952a12ae32802cbc6bde5707222c30c90cbb85D�F � afda0e4a1bc46470df4a4993f659a23e39c688752ccd5958b18e448a2d51f8d1D�E � 2eb85e9cbd29bebc8ce3cd107af06c6ae0f59fcc9a1056aa9226b8201c309a26D�D � 1612a4f04271f95f905580cfc4cc94695b1a11ade17803d000750d518bc0e3acD�C � f5a544c1c54d159d63ecf02b66555411db8230d7164937c969ee12412a7b3426D�B � 3f11637118683c18d64ab08e86467d90916b689368a1c29e9b095c9b7c8e2633 P�a� � � d�wUBTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuBTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{BPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WBArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!BArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�cBPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) � ]�n g�{WCArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!CArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�cCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w�CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�wqCPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) � �$�' � {� w�DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wqDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� {�CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wUCTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wuCTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{CPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) P�a� � � d�'wUDTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�&wuDTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�%{�{DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�${WDArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �#{�!DArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�"wCDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�!w�cDPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) � x�J�[ � g�-{WEArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �,{�!EArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�+wCEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�*w�cEPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�)w�EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��({�DPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � �$� � {�3w�FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��2{�EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��1{�EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�0wUETomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�/wuETomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�.{�{EPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) P�a� � � d�:wUFTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�9wuFTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�8{�{FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�7{WFArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �6{�!FArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�5wCFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�4w�cFPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t�AwuGTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�@{�{GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�?{WGArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �>{�!GArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�=wCGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��<{�FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��;{�FPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�I{WHArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �H{�!HArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�GwCHPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�F{kGPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��E{�#GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��D{�GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��C{�GPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�BwUGTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) � �$� � ��O{�#HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��N{�HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��M{�HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�LwUHTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�KwuHTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�J{�{HPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - ��V{�IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�UwUITomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�TwuITomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�S{�{IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�R{WIArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Q{�!IArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�P{kHPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�\{WJArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �[{�!JArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�Z{cIPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�Y{kIPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��X{�#IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��W{�IPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��b{�#JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��a{�JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��`{�JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�_wUJTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�^wuJTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�]{�{JPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��i{�KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�hwUKTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�gwuKTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�f{�{KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�e{WKArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�d{cJPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�c{kJPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�o{WLArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��n{�7KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�m{cKPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�l{kKPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��k{�#KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��j{�KPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��u{�#LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��t{�LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��s{�LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�rwULTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�qwuLTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�p{�{LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��|{�MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�{wUMTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�zwuMTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�y{�{MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��x{�7LPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�w{cLPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�v{kLPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � �?�}�MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {cMPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kMPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��~{�#MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��}{�MPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��{�#NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUNTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuNTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � ��5 � ��{�#OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {�OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?� }�NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7NPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {cNPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kNPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake e �r+��V��: � � e D�[ � 3d4d0d965fc073d950dd63507c1b1287648ef59c103d02cf09891c04bd99e930D�Z � d0428b24d84b75519bce64c115f13b151f065712ac094dcd035dc9b63bbdc664D�Y � 0d953611a4ac63b86ca9bbf1ca0f35e9ef53094123f9e581e16919ed0393c690D�X � 40ceb41cf108321fdafc40bff1168cbc4f3e85a9ec271d6b55e946ed83697fb7D�W � 86d0b148abfa317696a046ac187cb479b242ea3f9ec769e6891130395ea172a9D�V � b3e23051f12c034b848268c08321e17a519c484640546a3ae90e7f99b36e7174D�U � 9ea26fb857c06b7e275a794a125b7880359b3911861019696cd35074ee1063d3D�T � ba3bba99a83841a7ef214b159627a5734756196a37510565d94c55e374ab6dc9D�S � 6c557f44383a709d2f0b400c2b77b432a965e5b7d4507ed1ecaf15fd92b55760D�R � 516201be4c2a553028eb1f983417912a1b05f800b8989fcd30a55f89623a57b6D�Q � 1f800a61ea4b98c012916d84ad280573560d18bf31af0e459b43494dbf907a0dD�P � edfa799d5c426dea0808d52912a4ed39b1534c8e7a5d3dc0a96937be66990f1cD�O � 9ed16457c6de56bbd64bcca2285bd78861c098822395446cc3a1c693ffb69c77 � �� � ��}�!OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}gOPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}�OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7OPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cOPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kOPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�^�z � �?� }�PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)�� {�7PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{cPPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kPPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) _ b�]�C � _ m�${cQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�#{kQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��"{�#QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��!{�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� }�!PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p� }gPPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)�� }�9PPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��*q�QStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��)}�!QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�(}gQPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��'}�9QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�&}�QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��%{�7QPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) � x�rf � �?�0}�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��/{�7RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�.{cRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�-{kRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��,{�#RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��+{�RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) b b�]�] � b r�7wqSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��6w�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�5w}SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��4q�RStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��3}�!RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�2}gRPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��1}�9RPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� i� j� k� l�$ m�+ n�1 o�8 p�> q�E r�K s�R t�X u�^ v�e w�k x�r y�y z� {� |� ~� � �� ��' ��- ��3 ��: ��A ��I ��O ��V ��\ ��b ��i ��o ��u ��| �� �� �� �� �� ��$ ��* ��0 ��7 ��= ��D ��K ��R ��Y ��` ��g ��m ��t ��{ �� �� �� �� �� ��$ ��* ��1 ��7 ��= ��D ��K ��Q ��X ��^ ��e ��k ��r ��x ��~ �� �� �� �� �� ��% ��, ��3 9 Ü@ ĜG ŜN ƜT ǜ\ Ȝb ɜi ʜp ˜v ̜| ͝ Ν ϝ Н ҝ ӝ$ ԝ+ ՝2 ֝8 ם@ ؝F ٝM ڝT Z ܝ` ݝg { ��t�y { �z�={�{SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�<{WSArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �;{�!SArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�:wCSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�9w�cSPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�8w�SPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) � ��� � � [�DwCTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Cw�cTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Bw�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�AwqTPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��@w�TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�?w}TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)t�>wuSTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) o� � {�Kw�UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�JwqUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Iw�UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�HwuTTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�G{�{TPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�F{WTArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �E{�!TArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) P�a� � � d�RwUUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�QwuUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�P{�{UPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�O{WUArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �N{�!UArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�MwCUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Lw�cUPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) ~ z��y � ~ g�Y{WVArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �X{�!VArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�WwCVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Vw�cVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Uw�VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�TwqVPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Sw�VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636) # �$�1 � # [�`wCWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�_w�cWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�^w�WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�]wqWPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�\wUVTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�[wuVTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�Z{�{VPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) , o�) � , r�gwqXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��f{�WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�ewUWTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�dwuWTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�c{�{WPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�b{WWArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �a{�!WArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812) { ��t�y { �z�m{�{XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�l{WXArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �k{�!XArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�jwCXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�iw�cXPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�hw�XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) } �"� l } � �t{�!YArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�swCYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�rw�cYPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�qw�YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��p{�XPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�owUXTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�nwuXTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) , ��!�2 � , {�{w�ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��z{�YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��y{�YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�xwUYTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wwuYTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�v{�{YPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�u{WYArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�wUZTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuZTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WZArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �~{�!ZArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�}wCZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�|w�cZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) " x��� � " t� wu[Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W[Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�![Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{�ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�ZPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) * ����% � * g�{W\Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!\Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebaseq�{k[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {�[Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU[Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902) e �r+��V��: � � e D�h � f7789c32ac34827df4b6c180e845361bb70aa1fcbc165a6c2a533559f2bc3f76D�g � 566646f7e600ab8480640215904fa6db201c8d068ab3d6f8b7e348bf1ad1fd34D�f � b97a0e1f72d3fb43f706975f8e02ff0c130ef35fc6b4763eb18db88980fcde25D�e � 922e0899bd8cf38bf10d752a0549435a450f968969520194880a2484c23f16dfD�d � 61a1892c950bfc4a208064a4e1d8a4d65876ca4891cc730ee2b045f0f37f7794D�c � 07ef29e54e22c90b43aa4eb7133046f805b01fd91030eafee283ca4db4b35173D�b � b09f1f08469f4eb7a40b74f2e3cd25fa408b93d9213c6bdbc7ef21b1ee1ac8a9D�a � 1a1a8ca0b3ee1af1eea431740811a8a48d9564e81093de7dc250d46e47d3383fD�` � 1c0761e63af4f982fec4bf5ddbda7da44c1f6472883839db48386eaaac902785D�_ � 9e951fe6f09cc5cf1402211e1232a2a92d029d66404daf66003bfc285052a41dD�^ � 27e369dd165f3e4ff6b99227422febe5eb07cd10c6962ce831eade5566e16b91D�] � 22eb2233053a534b388c3ed8e39dfa1b4901d5e8b1e278a8c843c301c9db2488D�\ � 32f0185e8d6a9ab586922827519f1f38fb921fcaff260385904d3e61dd029d44 � �$� � ��{�#\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wU\Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wu\Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) - ���� � - �� {�]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wU]Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu]Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W]Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!]Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�{k\Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rq g�${W^Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �#{�!^Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)m�"{c]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�!{k]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�]Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��*{�#^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��){�^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��({�^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�'wU^Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�&wu^Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�%{�{^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��1{�_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�0wU_Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�/wu_Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�.{�{_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�-{W_Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�,{c^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�+{k^Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake � x�rf � g�7{W`Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers��6{�7_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�5{c_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�4{k_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��3{�#_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��2{�_Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �$� � ��={�#`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��<{�`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��;{�`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�:wU`Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�9wu`Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�8{�{`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) � �� � ��D{�aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�CwUaTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�BwuaTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�A{�{aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��@{�7`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�?{c`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�>{k`Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake x�rf � ��K{�bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�J}�aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��I{�7aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�H{caPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�G{kaPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��F{�#aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��E{�aPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�rf � �?�Q}�bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��P{�7bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�O{cbPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�N{kbPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��M{�#bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��L{�bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) _ b�]�C � _ m�X{ccPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�W{kcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��V{�#cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��U{�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��T}�!bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�S}gbPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��R}�9bPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795) y d�� � y ��^q�cStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��]}�!cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�\}gcPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��[}�9cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�Z}�cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��Y{�7cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) m ��� \ � m � �e{�!dArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�dwCdPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�cw�cdPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�bw�dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�awqdPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��`w�dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�_w}dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081) � ��!�& � {�kw�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�jwqePetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��iw�ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�hwudTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�g{�{dPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�f{WdArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers P�a� � � d�rwUeTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�qwueTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�p{�{ePetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�o{WeArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �n{�!eArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�mwCePetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�lw�cePetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617) � ]�n g�x{WfArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �w{�!fArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�vwCfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�uw�cfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�tw�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�swqfPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589) n �$� n �,�~w�cgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�}w�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��|{�fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�{wUfTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�zwufTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�y{�{fPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) C ���2 � C ��{�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUgTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wugTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WgArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� � {�!gArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wCgPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase C x� ! � C d� wUhTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wuhTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g� {WhArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!hArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wChPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��{�gPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�^�Y � g�{WiArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!iArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�{khPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {�hPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) e �r+��V��: � � e D�u � 2924951f311fafa5d17831ab4e1bd85bee2bd6d9ed591445149b5fd70152d077D�t � 4552c0e9031fc5f990a165feb17e2cd243461f760cb80e75769c837d1052f193D�s � 8908f58fb71fd39056da9b792dd69e358735856d43352a085ffea8b4b8f2039eD�r � ca5ee1ff2a858d3eaf6bbed3a7c0421519183d99018689b9d2bfb4f8b2bdb122D�q � 02b9f36207f55eecbaed6219e76bf38881875be99f49e0eca71ec75e6d3a7aa3D�p � 235100bdba26a1af51c7f66f533d9318837d01dafa0c5e822245c8e0e5469978D�o � 1efc77004111254487934c32f189a3b3fc8b1baf00a6e8350558183281f3855dD�n � f6274f5c3cd73beb54d94229fd5b93b99b525f50921dae06b852ca0ada18b5b9D�m � cf810cc7447c597839d02d5738646b8afcdb25edddcbd9cfbd3173d5a01cf3a3D�l � 089b94f213c170e875e90bb476e333d4b7d2491e323f4692f8e1513f78b4203eD�k � 8724fc26052010a537fbffaecee3413ede14b44646e26a456c4c8695f5f259c0D�j � 11e7a9eb9ad854ce3901deb76ff9ab3e462f87d56766b9cda133c1fbcc89d812D�i � 1a7fc39e7d481badbe2fe10dd40d290dcdefdeb4f572a8affee7880a751d5805 � �$� � ��{�#iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUiTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wuiTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{iPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N �� {�jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wUjTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wujTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WjArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�{ciPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kiPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z�%{�{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��${�7jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�#{cjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�"{kjPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��!{�#jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�jPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �"�� � m�,{ckPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�+{kkPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��*{�#kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��){�kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��({�kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�'wUkTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�&wukTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) d�� � � m�3{clPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�2{klPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��1{�#lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��0{�lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��/{�lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�.}�kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��-{�7kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) v d�� � v ��9{�mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��8}�!lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�7}glPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��6}�9lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�5}�lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��4{�7lPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�@}gmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��?}�9mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�>}�mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��={�7mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�<{cmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�;{kmPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��:{�#mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) E n�n�s � E �,�Gw�cnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Fw�nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�EwqnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Dw�nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�Cw}nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��Bq�mStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��A}�!mPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) 7 ���2 � 7 r�NwqoPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��Mw�oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�LwunTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�K{�{nPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�J{WnArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �I{�!nArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�HwCnPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase { ��t�y { �z�T{�{oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�S{WoArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �R{�!oArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�QwCoPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Pw�coPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Ow�oPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) & �"�/! � & g�\{WpArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �[{�!pArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�ZwCpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�Yw�cpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Xw�pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�WwqpPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�VwUoTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�UwuoTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) n �$� n �,�bw�cqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�aw�qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��`{�pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�_wUpTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�^wupTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�]{�{pPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) C ���2 � C ��i{�qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�hwUqTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�gwuqTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�f{�{qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�e{WqArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �d{�!qArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�cwCqPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase C x� ! � C d�pwUrTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�owurTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�n{�{rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�m{WrArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �l{�!rArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�kwCrPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��j{�qPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�^�Y � g�v{WsArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �u{�!sArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�t{krPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��s{�#rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��r{�rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��q{�rPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � �$� � ��|{�#sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{{�sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��z{�sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�ywUsTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�xwusTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�w{�{sPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��{�tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�wUtTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�wutTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z� {�{tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{WtArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�~{csPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�}{ksPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z� {�{uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��{�7tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{ctPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{ktPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�tPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �"�� � m�{cuPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kuPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)�� {�uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� {�uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d� wUuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wuuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) d�� � � m�{cvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{kvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��{�vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��{�vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�}�uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7uPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) e �r+��V��: � � e D� � 6c2a1f394c23865716bd975554c638950ef8bb2b3efd23074290f41ebd724f20D� � 41923a544cdeeda959457ff656dfdd7e871d90f2d4f234055c2bb0f1f3996609D� � 4f2f74c8de47efbfeea14ccb4e01899a829a67121a6963532b82205d11eaea8bD� � f59ceed71d088a420b5ecc67bc4a13df798f7d3d12556a27285fb4dfd594850eD�~ � 74038c223561306541466c5407569dcc8055567f3cc9a56e7ec106015d2df942D�} � 32af5400af5619a7e1f0c43f574170ae98cfd7cdc7e831f572b8d05530bd8913D�| � 850be6d438290af4b3c31805a40c2f8a88e4e751bafa1bb02b6b884736f80ef2D�{ � 8317594c4733bc6fd9c13e0001d962d14e7bffb83ed66e6337f6b8a490067ea9D�z � a191bcc40fb33d21a6109e116756d8999e60adb5535583f65d05f51ff3047463D�y � f43e7c1792d357cd5fb1ac5a13e744a5ba50e7309444d7ab7d0149227755b575D�x � f6c854fef6008f3f063c3ed1c4f6a2e51821b5fe057282702dfcd15b7783bd41D�w � dd3bfb74354db34116d2bb2b298b233f3d005acdb7709c1ea17dd9dede2e0566D�v � d1870d7298e93c62411f7b0b728df981e13f75ca9fdac1fb117b0e2d50d3b71f v d�� � v �� {�wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� }�!vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}gvPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}�vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7vPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�$}gwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��#}�9wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�"}�wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��!{�7wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m� {cwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q� {kwPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake�� {�#wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) E n�n�s � E �,�+w�cxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�*w�xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�)wqxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��(w�xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x�'w}xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)��&q�wStepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)��%}�!wPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) 7 ���2 � 7 r�2wqyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��1w�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�0wuxTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�/{�{xPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�.{WxArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �-{�!xArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�,wCxPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase { ��t�y { �z�8{�{yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�7{WyArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �6{�!yArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�5wCyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�4w�cyPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�3w�yPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) & �"�/! � & g�@{WzArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �?{�!zArtem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�>wCzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�=w�czPetr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�<w�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r�;wqzPetr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d�:wUyTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�9wuyTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) n �$� n �,�Fw�c{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�Ew�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��D{�zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�CwUzTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�BwuzTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�A{�{zPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) C ���2 � C ��M{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�LwU{Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Kwu{Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�J{�{{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�I{W{Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �H{�!{Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�GwC{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase C x� ! � C d�TwU|Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Swu|Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�R{�{|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�Q{W|Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �P{�!|Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�OwC|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��N{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�^�Y � g�Z{W}Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �Y{�!}Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�X{k|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��W{�#|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��V{�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��U{�|Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � �$� � ��`{�#}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��_{�}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��^{�}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�]wU}Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�\wu}Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�[{�{}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��g{�~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�fwU~Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�ewu~Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�d{�{~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�c{W~Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�b{c}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�a{k}Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake h x�rf h �z�m{�{Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)��l{�7~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�k{c~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�j{k~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��i{�#~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��h{�~Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � �"�� � m�t{cPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�s{kPetr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��r{�#Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��q{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��p{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�owUTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�nwuTomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) d�� � � m�{{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�z{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��y{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��x{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��w{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)�?�v}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��u{�7Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) v d�� � v ��{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)�� }�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220)p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��~}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��|{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) n���+ � p�}g�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12c���- Include test of forwarders (CVE-2021-25220)��}�9�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11c5��- Prevent excessive resource use while processing large delegations. (CVE-2022-2795)�?�}��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10c,N@- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178)��{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) E n�n�s � E �,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)�� w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)x� w}�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2^h�- Allow conflicting zone files with a warning (#1744081)�� q��Stepan Broz <sbroz@redhat.com> - 2:9.11.4-26.P2.14d��@- Prevent the cache going over the configured limit (CVE-2023-2828)�� }�!�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13c���- Tighten cache protection against record from forwarders (CVE-2021-25220) 7 ���2 � 7 r�wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)��w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2^ku�- Do not crash when nsupdate with GSS terminated early (#1300636)t�wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase e �r+��V��: � � e D� � f1ba2741b87027c8c0f29b9262bb396c142986c3ad3c68f88e90f34cb028b6deD� � 8e35267d29e2ee8a7d9678927b89dd4a07137e32a7f920844428b1f94aaf2c97D� � d9c97d1412cfdb3b24b2aca08bec9bed63be4db9461f19ba0eef840ad48dc19eD� � f17b58dd383483f1592c8c3c0bf814ed80d208d19a254620ec541a14c9f5f144D� � 20887cda88d458e236a1d13d68fb01b10056907594d573f0342d40b9bd677d37D� � b88c8339f9ad90d0855cda0072a67860549759e8870cc9abc61555e4d4ef4f61D� � db4dac1347f0a7c37ce54b990ae4be455c6c016e54d0a315f1e2cbefcefd3073D� � ad525efce24792177db9c59af54a5822206dc0ec6f5b18770062ca07e51ac4caD� � f2cbc4c0d7d808554f9689174450c43f80db727c186bd3a1980494886a25212aD� � 0834c02bc349eaabe64a4015d07ee7cbcf7776a68766e81cd93be0a58c7d5465D� � 43f50cb7c44309253c847a258d592992e250678cda19887c482849bd67b447e3D� � 461bf2c4280e37fa28f8577583cf56315e10dc6a8898497da766b5dffbdb1a56D� � 797abce4232e5ed3353b7d0733cce5d5aea1134edf9acaa37b6028ef6bcfbc3d { ��t�y { �z� {�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201) & �"�/! � & g�${W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �#{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�"wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase�,�!w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){� w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)r� wq�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2^oj@- Disable atomic operations also on ppc (#1779589)d� wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t� wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876) n �$� n �,�*w�c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2^�x�- Limit number of queries triggered by a request (CVE-2020-8616) - Fix invalid tsig request (CVE-2020-8617){�)w��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2^r @- Solve often priming queries on some forwarder (#1756201)��({��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�'wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�&wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�%{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) C ���2 � C ��1{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�0wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�/wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�.{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�-{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �,{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�+wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase C x� ! � C d�8wU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�7wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�6{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�5{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �4{�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)[�3wC�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2^Ǿ�- Add CVE tests to codebase��2{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � x�^�Y � g�>{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken servers� �={�!�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2^��- rebinding protection for forwarding DNS server upstream patch (#1832812)q�<{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��;{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��:{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��9{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) � �$� � ��D{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��C{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215)��B{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�AwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�@wu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�?{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) N � ��= � N ��K{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.4`*b@- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)d�JwU�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.3_�:�- Fix inline re-signing (#rh1889902)t�Iwu�Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2_w@- Fix unsupported algorithms validation (#rh1769876)�z�H{�{�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1_FN�- Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624)g�G{W�Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2^�@- Fix EDNS512 loops on broken serversm�F{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�E{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake U x�rf � U ��Rg�9�Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){�Qg��Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632)��P{�7�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9a�- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152)m�O{c�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8ah�- Prevent a race after zone load (#2011220)q�N{k�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7`�@- Apply again patch 172, got removed by mistake��M{�#�Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.6`�Z�- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)��L{��Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.5`���- Possible assertion failure on DNAME processing (CVE-2021-25215) � � zy � � �Xg�W�Nick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)��Wg�?�Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h�Vgm�Nick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)��Ug�7�Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s�Tg��Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){�Sg��Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587) � � v � � s�^g��Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){�]g��Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)��\g�9�Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){�[g��Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632)��Zo��Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m�Yg�u�Nick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892) R nm� � R ��do��Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m�cg�u�Nick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� �bg�W�Nick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085)��ag�?�Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h�`gm�Nick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)��_g�7�Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884) h ��q�i � h ��kg�?�Nick Clifton <nickc@redhat.com> 2.27-41.base\�r@- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch. (#1699745)h�jgm�Nick Clifton <nickc@redhat.com> 2.27-40.base\N�- Enable gold for PowerPC and s390x. (#1670014)��ig�7�Nick Clifton <nickc@redhat.com> 2.27-39.base\<y�- Fix a potential illegal memory access triggered by an integer overflow. (#1665884)s�hg��Nick Clifton <nickc@redhat.com> 2.27-38.base\4��- Disable optimizations of x06_64 PLT entries. (#1624779){�gg��Nick Clifton <nickc@redhat.com> 2.27-37.base\4��- Add the .attach-to-group pseudo-op to the assembler. (#1652587)��fg�9�Nick Clifton <nickc@redhat.com> 2.27-36.base\4��- Prevent resource exhaustion attacks on libiberty's name demangling code. (#1598561){�eg��Nick Clifton <nickc@redhat.com> 2.27-35.base\4��- Stop strip crashing when removing .comment sections. (#1644632) + ^m��. � + W�reM�Josef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%�qe�g�Josef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiffR�peC�Josef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources_�oe]�Josef Ridky <jridky@redhat.com> - 0:1.8.18-1X� @- New upstream release 1.8.18 (#1398658)��no��Nick Clifton <nickc@redhat.com> - 2.27-44.base.1ar��- Add ability to control the display of unicode characters. (#2009168)�m�mg�u�Nick Clifton <nickc@redhat.com> 2.27-44.base^E:@- Allow the BFD library to handle the copying of files which contain secondary reloc sections. (#1785294) - Implement assembler workaround for Intel JCC microcode bug. (#1778892)� �lg�W�Nick Clifton <nickc@redhat.com> 2.27-42.base]w�@- Stop the BFD library from complaining about sections with multiple sets of relocations. (#1749085) � ���'� � � �xk�S�Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78.i�wsc�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^�vsM�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o�ue}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)��te�=�Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o�se}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658 � � �P�z�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^�y��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] ; ; �9�|��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t�{��e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] { � { � �~��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ��X�}��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f���I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] p p � � ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o���Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q���]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ���7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �f���I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] p p � ����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o���Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q���]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] / �/ �R� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE �^���7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} - - �O� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ( � �� ��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T� ��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] C � C � �s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J� s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] E E �D�s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] e h�e �j�s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 6 ����+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F�s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � �s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �^���9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] e �r+��V��: � � e D� � 2d58b75f307b928bfae35e0818fe5449c542ed611f46c2ba4663d50f304c0295D� � 6652fd59e1328ff5e8f2141d6e091685a4e2cb80366a0f729537fb40a17779b8D� � 168cb87176ec6a7a6805dcccc50c34a22945c1ebfd027164ff0028a1a140a637D� � 388ece9ac8d1f44fa207868af7af9df39a1479ce72301c159bfb9ed3f436fd61D� � f2dc09932d5afec99bdc35c39f858385a06e600f3b989133d348ed00959ba429D� � 19575eb2feb5e29ed339c078e462e2a4ac7a44f0888328185fc248a30681b82eD� � 5b19e42e03ab5ffdc24e71ec6c71dd0d4c8a557e482b142cb58bd7eaf529174aD� � e07580dc20cee29ddae2c26b7d4782a6e7671477d7f4ae210d2cef6cc71555cbD� � 8b60c6a9194e57ad101ad2a28015f644b915aa5c958a5f8b0e68def14394fa13D� � 479b38bee7280885a7df789a1472c2d43e1a0103f8607f0e6d3fb26c2ae13423D� � bfe191b783a11c70daf05fb86e81e2e36d80b7dec5eb2243fa223700ce330824D� � a6119606e76fc09a37585914c2063026064b1b979d9cffcf71712c2218b4c3c2D� � d8f18b1da519f3d475ad00269e3908ecb8abedc91f0754a3a8a6aa8b624b04dd to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] E E �D�s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] e h�e �j� s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 6 �� ��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F� s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^� ��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] y � y �^�!��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!� ��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} of eflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ߝt �{ � � � � � �$ �* �1 �8 �> �D �K �R �X �^ �d �k �r �x ��z ��| ��~ �� �� �� �� � � � � � � � � � � � � � � � � � �! �# �% �& �' �( �) !�* "�, $�- %�. &�/ '�0 )�1 *�3 +�5 -�6 .�7 /�8 0�9 2�: 3�< 4�= 5�> 6�@ 7�A 8�C 9�E :�F ;�G <�H =�I >�J ?�K @�L B�N C�P D�R F�T G�V H�W I�X J�Y K�[ L�] M�^ N�_ O�` P�a Q�c R�f S�g T�h U�j V�m W�n Y�o Z�q [�s \�t ^�u _�v `�w a�x b�z d�{ RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O�#���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R�"�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE A ( A �[�%��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T�$��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�&��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�'��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 2 2 �J�(���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 2 2 �J�)���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��*���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend A ( A �[�,��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 #�T�+��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�-��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�.��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 2 2 �J�/���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 2 2 �J�0���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��1���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ( M � M �/�3��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�2��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] b Ib �[�5��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ,�3�4��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�6��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�7��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 2 2 �J�8���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 2 2 �J�9���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��:���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend 1 M � M �/�<��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�;��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] I I �3�=��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) B B �:�>��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] M � M �/�@��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�?��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] I I �3�A��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 6 B 6 ��C�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:�B��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] 1 �1 ��E�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@�D��{�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) > > �>�F��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ��G��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} / / �M�H���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] u u ��I�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] > > �>�J��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ��K��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} / / �M�L���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] , ��N��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H�M�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP A U { U �"�P��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]��O��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] . � . ��R��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1�Q��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] , ��T��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H�S�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP E U { U �"�V��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]��U��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1�W��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � �X���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��Y���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] 0 � 0 �2�[��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��Z��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � ] � ��]��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� �\��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"�^��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1�_��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � �`���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��a���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] 0 � 0 �2�c��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��b��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] ]� � �f��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"�e��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� �d��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � �g���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��h���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] 0 � 0 �2�j��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��i��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] ]� � �m��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"�l��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� �k��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 3 3 �I�n�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} n n ��o�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 X p p � �q��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i�p��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Z� � �s��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"�r��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 3 3 �I�t�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} n n ��u�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 ] �i�v��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_�w��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] E E �7�x��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!�z��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7�y��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} n n ��{�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 c �i�|��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_�}��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] E E �7�~��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!� ��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7���m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] r fr �p���_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]����+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} "� ����+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n���[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig k�Z���3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] let() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush mif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r neform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � . � �n���[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig p�Z���3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p���_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] qet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush rif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r seform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] d }d � � ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 u�� ��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � @ � �� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<� ��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} & �S�& ��s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%���I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� � ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F�s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j�s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ����+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol {�^���9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] ; ; �9���o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ~�t���e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command | erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 5 �5 �n���[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��X���-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} e �r+��V��: � � e D�) � 149c020747f7a669eb88245d5064fa806ac7462e9cdd3a6c05414ff08bdd43e7D�( � 86101a94927cf01319d801575aa4ea26e63efa577a5431856e0329f06a994596D�' � ce3a408dfe9ac91c4e9fefe4168ef2cbd9d6d18a92f2dfd2e36b2b7af8c8b103D�& � e2dd1e90386216ad54e0f6e9509f96a4314819f96abc9b8ea88ffbb03f05dd03D�% � a8d4bf67c5aec05b8881b57f4ec80fbc832c77a1fabb65bb68b376c269b759d3D�$ � 85de1b747c97e7d16a742f3f0789c4d8761e3b44c28ff437bc8b47499a9132adD�# � 61a258f5eb7c2c013c4eeb36791fdc7dc8b813c04b4ae5b0d1a31faa435a58acD�" � 04b4fe240bbb7def555afa21959f623f37179a6993d0e6a57f592f05ab3f531bD�! � 66cc35a05dd83f4129f6b3bb4f774d59fc607704c381b660b909ab3e3776ab96D� � 7284d6fec357299a1772944305ca58f5d48637a3031733bcdd30849ec50f7a98D� � e9db6345b34c115b15bd297bcda0f0680ee1a37cf51adeb1477e16e232d6f289D� � 81df5804e78ba7e49ce4ceb11f4b7c514d4f06d0ad146b950993c6cb77e58dfaD� � 0dac2946a3cac243477b0ac6573b491a15bcd751bbfaa32b92535f850f10cf3f �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] d }d � ����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 �����}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � @ � �� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<� ��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} S �S �%� ��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� � ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\� ��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � Q Q �+�!��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ) ) �S�"��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � vr � �%�%��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �$���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}��#�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\�&��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � Q Q �+�'��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ) ) �S�(��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) s �D s �M�+���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�*��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��)�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 8 8 �D�,���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ) ) �S�-��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) s �D s �M�0���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�/��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��.�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 8 8 �D�1���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ' w ' �L�3���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]��2�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � e�� � �6���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]��5��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]��4��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] ' w ' �L�8���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]��7�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � e�� � �&�<��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� �;���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]��:��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]��9��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] z z ��>��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l�=��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�?��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 7 _Q' 7 �l�C��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�B��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� �A���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� �@��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] j j ��D��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�E��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � I _ I ��G��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �F��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � Q* � �B�J���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �I���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+�H��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} P ��P ��M��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l�L��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�K��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�N��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � I _ I ��P��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �O��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � Q* � �B�S���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �R���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+�Q��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ��U��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L�T���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�V��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � of flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� f�} g�~ h� i� j� o� t� v� w� x� y� z� }� � �� �� �� �� ��! ��" ��% ��& ��' ��( ��+ ��, ��- ��0 ��1 ��3 ��6 ��8 ��< ��> ��? ��C ��D ��E ��G ��J ��M ��N ��P ��S ��U ��V ��X ��[ ��\ ��] ��_ Ơa Ǡb Ƞd ɠe ʠg ̠i ͠j Πl Ϡm Рo Ҡr Ӡt Ԡu ՠw נ{ ؠ} ڡ ۡ ܡ � � � � � �* �4 �> �H �P �U �[ �b �g �n �s �z �} �� �� �� �� � � � � � � �% �* �/ �4 �7 �9 �< �? �A �C �G �I �K I _ I ��X��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �W��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � Q* � �B�[���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �Z���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+�Y��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L�\���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] ' ' �U�]��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � �_���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ���^�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} j �j �L�a���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B�`���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] ' ' �U�b��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i�d��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]��c�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} < < �@�e���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � c � �7�g��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ˅�f��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} y �y �L�i���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3�h��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] ' ' �U�j��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i�l��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]��k�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} < < �@�m���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � c � �7�o��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc х�n��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} H �+H �_�r��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]��q��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3�p��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i�t��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]��s�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} < < �@�u���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � c � �7�w��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc օ�v��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �+H � � �{��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_�z��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]��y��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3�x��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] Y � Y ��}��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]��|�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � =h � �_���=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�� ��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3���e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7�~��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � `VK � �<���w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ���7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � I4 � ��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono ފ �s�!�Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ݃3���e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] C � C � � s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J� s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] E E �D� s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o� s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] e h�e �j�s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []�� s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 6�w( � v Z�iO�Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�]?�Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�_e�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�]?�Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�_c�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�_Y�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)�F�s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] f �?��&�u � f Z� iO�Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL� ]?�Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`� _e�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L� ]?�Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_� _c�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�_Y�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�aO�David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�i[�Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�]]�David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�i[�Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 e �r+��V��: � � e D�6 � 2b5152401ce98d5b3a93e430dbe5819aed3a19a15ef5104214f16d8171c990feD�5 � b1b4503ca199a88ac8a81a7fa75f6487ef746fd58e4bf8d079e879b4ad3596cbD�4 � d56f208cb0a3f9404c7aa65a34d04ff637f76d4517d2f68c4c63ec940a0806a5D�3 � 04dce9028a87d078c3036031ae186db04fd35a585bd35d7aa2fcc7c8300830edD�2 � a99bb11d5187d473fbf1ceddf45f95459a860863d190605924743cdb4f34261bD�1 � 7c67eafa7cee5c39a41ff1aeb7d5cd4d764c1967ad0cc0795ad34e1d63727f0eD�0 � 58d8a7b6d0fdb9777df76fd29a92c1c249ab8fe602e217d454e4b89dd8a82452D�/ � d30f35b56aec811e1b348312a8f58d2e793a4c89f8e25ac9155a5e74a0d04b90D�. � 1b927fc58d94ad45dc78d0926b1fb83cae72958110a6ebfa24f75a5d5a9a4b4dD�- � 37c1fc32da75405bdcca093c9fce198c021c7868450f7b272aed38def708857dD�, � 518ebaac264e510836e723892b0b9982787bf6b242d9843e5ab09ecc5c9f642aD�+ � 4857df90d4f9aa3520255aef6c5bdbe887f7cdaae0d006c15b15db7c418b372fD�* � ad182b2b1a28f50e4030294d1ad1de624300da1440a08ecc9180070cc3c2b076 f �?��&�u � f Z�*iO�Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�)]?�Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�(_e�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�']?�Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�&_c�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�%_Y�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�$aO�David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�#i[�Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�"]]�David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�!i[�Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 f �?��&�u � f Z�4iO�Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�3]?�Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�2_e�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�1]?�Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�0_c�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�/_Y�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�.aO�David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�-i[�Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�,]]�David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�+i[�Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 f �?��&�u � f Z�>iO�Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�=]?�Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�<_e�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�;]?�Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�:_c�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�9_Y�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�8aO�David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�7i[�Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�6]]�David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�5i[�Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 f �?��&�u � f Z�HiO�Peter Robinson <pbrobinson@redhat.com> 3.8.0-8S��- Fix dependencies on own libraryL�G]?�Daniel Mach <dmach@redhat.com> - 3.8.0-7R�U�- Mass rebuild 2014-01-24`�F_e�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-6R��@- Add dep on own library (related: #1045140)L�E]?�Daniel Mach <dmach@redhat.com> - 3.8.0-5R�k�- Mass rebuild 2013-12-27_�D_c�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-4R�j�- Complete translations (related: #1030319)Z�C_Y�Zeeshan Ali <zeenix@redhat.com> - 3.8.0-3R{��- Fix ISRC handling (related: #861191)V�BaO�David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�Ai[�Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�@]]�David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�?i[�Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 � �?��5�A � ��P���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW�OcO�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T�- Include URL to the license text��N���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�Mk/�Tom Callaway <spot@fedoraproject.org> - 1.9.1-1O�R�- update to 1.9.1V�LaO�David King <dking@redhat.com> - 3.12.2-5.1aTU@- Fix BD-R media flags (#2053594)`�Ki[�Richard Hughes <rhughes@redhat.com> - 3.12.2-5[)�- Update to 3.12.2 - Resolves: #1569810[�J]]�David King <dking@redhat.com> - 3.12.1-2U[%�- Rebuild for totem-pl-parser (#1222884)`�Ii[�Richard Hughes <rhughes@redhat.com> - 3.12.1-1UG_@- Update to 3.12.1 - Resolves: #1174577 � �F& � � M�U_?�Daniel Mach <dmach@redhat.com> - 1.10.0-3R�U�- Mass rebuild 2014-01-24M�T_?�Daniel Mach <dmach@redhat.com> - 1.10.0-2R�k�- Mass rebuild 2013-12-27� �Se�U�Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q��- New upstream release 1.10 - Obsolete upstreamed patches - Amend the multilib patch, there's no need to patch configure since we are running autoreconf anyways - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES��Rc�%�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf��- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally�/�Qc�}�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf��- Apply a patch by Stephen Gallagher to patch autoconf, not configure to allow optflags to be passed in by build environment - Run autoreconf before configure - git rm obsolete patches - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR L [ s L �/�[c�}�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf��- Apply a patch by Stephen Gallagher to patch autoconf, not configure to allow optflags to be passed in by build environment - Run autoreconf before configure - git rm obsolete patches - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR��Z���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW�YcO�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T�- Include URL to the license text��X���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�Wk/�Tom Callaway <spot@fedoraproject.org> - 1.9.1-1O�R�- update to 1.9.1�!�Vq�S�Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d��@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z] , yY � � , ��b���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�ak/�Tom Callaway <spot@fedoraproject.org> - 1.9.1-1O�R�- update to 1.9.1�!�`q�S�Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d��@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]M�__?�Daniel Mach <dmach@redhat.com> - 1.10.0-3R�U�- Mass rebuild 2014-01-24M�^_?�Daniel Mach <dmach@redhat.com> - 1.10.0-2R�k�- Mass rebuild 2013-12-27� �]e�U�Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q��- New upstream release 1.10 - Obsolete upstreamed patches - Amend the multilib patch, there's no need to patch configure since we are running autoreconf anyways - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES��\c�%�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf��- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally 2 � �R 2 � �ge�U�Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q��- New upstream release 1.10 - Obsolete upstreamed patches - Amend the multilib patch, there's no need to patch configure since we are running autoreconf anyways - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES��fc�%�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf��- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally�/�ec�}�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf��- Apply a patch by Stephen Gallagher to patch autoconf, not configure to allow optflags to be passed in by build environment - Run autoreconf before configure - git rm obsolete patches - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR��d���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW�ccO�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T�- Include URL to the license text � �`�m�y � ��n���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildW�mcO�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-3P"T�- Include URL to the license text��l���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.1-2P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildK�kk/�Tom Callaway <spot@fedoraproject.org> - 1.9.1-1O�R�- update to 1.9.1�!�jq�S�Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d��@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]M�i_?�Daniel Mach <dmach@redhat.com> - 1.10.0-3R�U�- Mass rebuild 2014-01-24M�h_?�Daniel Mach <dmach@redhat.com> - 1.10.0-2R�k�- Mass rebuild 2013-12-27 � �F& � � M�s_?�Daniel Mach <dmach@redhat.com> - 1.10.0-3R�U�- Mass rebuild 2014-01-24M�r_?�Daniel Mach <dmach@redhat.com> - 1.10.0-2R�k�- Mass rebuild 2013-12-27� �qe�U�Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1Q��- New upstream release 1.10 - Obsolete upstreamed patches - Amend the multilib patch, there's no need to patch configure since we are running autoreconf anyways - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES��pc�%�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-6Qf��- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally�/�oc�}�Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5Qf��- Apply a patch by Stephen Gallagher to patch autoconf, not configure to allow optflags to be passed in by build environment - Run autoreconf before configure - git rm obsolete patches - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR z [�:�w z ��zi�?�Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76] �- Update to CKBI 2.32 from NSS 3.44 - Removing: - # Certificate "Visa eCommerce Root" - �[�ygS�Kai Engert <kaie@redhat.com> - 2018.2.22-70.0Z��- Update to CKBI 2.22 from NSS 3.35[�xcW�Kai Engert <kaie@redhat.com> - 2017.2.20-71Z �@- Update to CKBI 2.20 from NSS 3.34.1b�wce�Kai Engert <kaie@redhat.com> - 2017.2.18-71Y��@- Update to CKBI 2.18 (pre-release snapshot)�?�vc� �Kai Engert <kaie@redhat.com> - 2017.2.16-71Y�A@- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions, Mozilla removed code signing trust from all CAs (rhbz#1472933)[�ucW�Kai Engert <kaie@redhat.com> - 2017.2.14-71Y.�- Update to CKBI 2.14 from NSS 3.30.2�!�tq�S�Alexey Tikhonov <atikhono@redhat.com> - 1.10.0-3.1d��@- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z] # Certificate "AC Raiz Certicamara S.A." - # Certificate "TC TrustCenter Class 3 CA II" - # Certificate "ComSign CA" - # Certificate "S-TRUST Universal Root CA" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - Adding: - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "GTS Root R1" - # Certificate "GTS Root R2" - # Certificate "GTS Root R3" - # Certificate "GTS Root R4" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "emSign Root CA - G1" - # Certificate "emSign ECC Root CA - G3" - # Certificate "emSign Root CA - C1" - # Certificate "emSign ECC Root CA - C3" - # Certificate "Hongkong Post Root CA 3" 9 � � 9 }�}i��Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`��- Update to CKBI 2.50 from NSS 3.67 - version number update only�N�|i�5�Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`�P@- Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "G ��e�{i�c�Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^�y�- Update to CKBI 2.41 from NSS 3.53.0 - Removing: - # Certificate "AddTrust Low-Value Services Root" - # Certificate "AddTrust External Root" - # Certificate "UTN USERFirst Email Root CA" - # Certificate "Certplus Class 2 Primary CA" - # Certificate "Deutsche Telekom Root CA 2" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "Swisscom Root CA 2" - # Certificate "Certinomis - Root CA" - Adding: - # Certificate "Entrust Root Certification Authority - G4" - fix permissions on ghosted files. �eoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "Trustis FPS Root CA" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Autho rity - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" w tw �� i�?�Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76] �- Update to CKBI 2.32 from NSS 3.44 - Removing: - # Certificate "Visa eCommerce Root" - �[�gS�Kai Engert <kaie@redhat.com> - 2018.2.22-70.0Z��- Update to CKBI 2.22 from NSS 3.35��~i�)�Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@��- Fix expired certificate. - Removing: - # Certificate "DST Root CA X3" # Certificate "AC Raiz Certicamara S.A." - # Certificate "TC TrustCenter Class 3 CA II" - # Certificate "ComSign CA" - # Certificate "S-TRUST Universal Root CA" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - Adding: - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "GTS Root R1" - # Certificate "GTS Root R2" - # Certificate "GTS Root R3" - # Certificate "GTS Root R4" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "emSign Root CA - G1" - # Certificate "emSign ECC Root CA - G3" - # Certificate "emSign Root CA - C1" - # Certificate "emSign ECC Root CA - C3" - # Certificate "Hongkong Post Root CA 3" 9 � � 9 }�i��Bob Relyea <rrelyea@redhat.com> - 2021.2.50-71`��- Update to CKBI 2.50 from NSS 3.67 - version number update only�N�i�5�Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71`�P@- Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "G ��e�i�c�Bob Relyea <rrelyea@redhat.com> - 2020.2.41-79^�y�- Update to CKBI 2.41 from NSS 3.53.0 - Removing: - # Certificate "AddTrust Low-Value Services Root" - # Certificate "AddTrust External Root" - # Certificate "UTN USERFirst Email Root CA" - # Certificate "Certplus Class 2 Primary CA" - # Certificate "Deutsche Telekom Root CA 2" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "Swisscom Root CA 2" - # Certificate "Certinomis - Root CA" - Adding: - # Certificate "Entrust Root Certification Authority - G4" - fix permissions on ghosted files. �eoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "Trustis FPS Root CA" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Autho rity - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" t t ��i�)�Bob Relyea <rrelyea@redhat.com> - 2021.2.50-72a@��- Fix expired certificate. - Removing: - # Certificate "DST Root CA X3" �}�i��Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71b��- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "Cybertrust Global Root" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "TunTrust Root CA" - # Certificate "HARICA TLS RSA Root CA 2021" - # Certificate "HARICA TLS ECC Root CA 2021" - # Certificate "HARICA Client RSA Root CA 2021" - # Certificate "HARICA Client ECC Root CA 2021" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020" �t Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Publi c Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - # Certificate "ANCERT C ertificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate " - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "VAS La tvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "TÜRKTRUST Elektronik Sertifi ka Hizmet Sağlayıcısı" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" o \�iS�Bob Relyea <rrelyea@redhat.com> - 2022.2.54-73b�(�- Update to CKBI 2.54 from NSS 3.79�a�i��Y�Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72b�V�- Update to CKBI 2.54 from NSS 3.79 - Adding: - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrus � J J �2�i�}�Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74b�z@- Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A." � �9�;�u � �p�Y� �Pablo Greco <pgreco@centosproject.org>]m@- Own yum vars - Generate yum vars at build time - Remove dist_suffix - Fix autorelabel preset - Fix tuned profile in system-release-cpe - Set aarch64 tuned profile to server - Update to 7.7P�UO�Pablo Greco <pablo@fliagreco.com.ar>[��- Update to 7.6 - Fix vault reposp� ]��Anssi Johansson <avij@centosproject.org>[� @- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o~� U�)�Pablo Greco <pablo@fliagreco.com.ar>[l,�- Enable ostree-remount in presets - Include power9 as a separate ppc64le archz� U�!�Pablo Greco <pablo@fliagreco.com.ar>[dC�- Unified tarball for all arches, so it can be built from the same src.rpmz� U�!�Pablo Greco <pablo@fliagreco.com.ar>[b�A- Sync version and fixes with centos-release - Unified spec for all archesG� OC�Johnny Hughes <johnny@centos.org>[b�@- Post Trans for contentdir � �{(�8 � �$�k�_�Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[M�A- Disable iterate-10 test which fails intermitently (#1596161) - Add BuildRequires for running autoreconf� �k�1�Rob Crittenden <rcritten@redhat.com> - 0.78.4-7[M�@- Pass _PROXY, _proxy, LANG and LC_* environment variables to helpers (#1596161)\�kQ�Rob Crittenden <rcritten@redhat.com> - 0.78.4-6[ @�- Remove reference to unused patchP�YK�Pablo Greco <pgreco@centosproject.org>_��@- Fix reference to 7.8 upstream@�Y+�Pablo Greco <pgreco@centosproject.org>_��@- Update to 7.9�>�Y�%�Pablo Greco <pgreco@centosproject.org>^��- Add rootfs-expand to aarch64 - Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos) - Own kvariant var in armhfp and aarch64 - Backport move of /etc/os-release to /usr/lib/os-release (ngompa) - Spec file cleanup (carlwgeorge) - Update to 7.8 >� � {�m� �Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^�@- Ensure that files read in have a trailing new-line (#1814976)�x�m��Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A��- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit man page (#1651368) - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781) - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727) - Document owner and permission parameters to getcert (#1549585)��m�9�Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b�@- Increase SCEP spec compliance, set more secure default cipher and hash. (#1533216)��m�C�Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[�@- Backport patches to add support for the MS Certificate Template V2 extension (#1622184)�>�k��Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr�- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment variables to helpers. The root cause was a bug in IPA (#1596161) W x�\� � W �� m�C�Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[�@- Backport patches to add support for the MS Certificate Template V2 extension (#1622184)�>� k��Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr�- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment variables to helpers. The root cause was a bug in IPA (#1596161)�$� k�_�Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[M�A- Disable iterate-10 test which fails intermitently (#1596161) - Add BuildRequires for running autoreconf� � k�1�Rob Crittenden <rcritten@redhat.com> - 0.78.4-7[M�@- Pass _PROXY, _proxy, LANG and LC_* environment variables to helpers (#1596161)�� m�#�Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`��@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)��m� �Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ�- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181) e �r+��V��: � � e D�C � 8c4048ad0a30efd78b835e73ee590a52730bf658e4ee011dd963e908a4dbad81D�B � 6489c51c51e8202231b1a3e24f6328463bbd952da0cbdede7cfd828112422e18D�A � c7607cfa2a4a5dcba948ec0c8b744a7f05d5113920dcbe14a16acdc6a14166b7D�@ � 7fe1420aaf46d2b3e38efd53645a2803c75ef85aa2e51400cf062745f1a1e9caD�? � 71f20a3e8a0bfe010564d4b6ff77d4b2647ba8383e62e64a557c131359fff889D�> � 78f9c4332b1d2f19135c616b66d43dfc85165cfc47974524516f8cfde4bb9665D�= � bbe893457383d81228467a2e58df9d5f1d18cbfd30d4cd35b2c717dc660133b7D�< � 744a4dba649fc88cac73b711d32a121916093d5d15e77ef286faaedeb4a66167D�; � a0771a63bfd2ad4fc5390775761741924acb2e2a6d6fea5e21306d97e0c18190D�: � 24f07a4fe7e067974796688aef2936d4d3134d870c6f53a7327a664da0d20893D�9 � dc1bf06608a791a1bc05682c7a5dd37ff4776553816b5359923260fb02f0c9e2D�8 � 71f02e63578770de15752f8dd63988ac82d645cc84914639679034beaf9f4136D�7 � cad56706d665a1639372b33e26f5e8b2d45d262ba181a414599688a30272bffd ] j�p � ] ��%m�#�Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`��@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)��$m� �Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ�- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181){�#m� �Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^�@- Ensure that files read in have a trailing new-line (#1814976)�x�"m��Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A��- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit man page (#1651368) - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781) - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727) - Document owner and permission parameters to getcert (#1549585)��!m�9�Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b�@- Increase SCEP spec compliance, set more secure default cipher and hash. (#1533216) � ��} � ��*m�9�Rob Crittenden <rcritten@redhat.com> - 0.78.4-11\b�@- Increase SCEP spec compliance, set more secure default cipher and hash. (#1533216)��)m�C�Rob Crittenden <rcritten@redhat.com> - 0.78.4-10[�@- Backport patches to add support for the MS Certificate Template V2 extension (#1622184)�>�(k��Rob Crittenden <rcritten@redhat.com> - 0.78.4-9[qr�- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment variables to helpers. The root cause was a bug in IPA (#1596161)�$�'k�_�Rob Crittenden <rcritten@redhat.com> - 0.78.4-8[M�@- Disable iterate-10 test which fails intermitently (#1596161) - Add BuildRequires for running autoreconf{�&m� �Rob Crittenden <rcritten@redhat.com> - 0.78.4-16aHw�- Fix file descriptor leak when executing CA helpers (#1992439) u �~ � u {�/m� �Rob Crittenden <rcritten@redhat.com> - 0.78.4-16aHw�- Fix file descriptor leak when executing CA helpers (#1992439)��.m�#�Rob Crittenden <rcritten@redhat.com> - 0.78.4-15`��@- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)��-m� �Rob Crittenden <rcritten@redhat.com> - 0.78.4-14^Ǿ�- Include &message=CA-IDENT with GetCACaps/GetCACert requests (#1839181){�,m� �Rob Crittenden <rcritten@redhat.com> - 0.78.4-13^�@- Ensure that files read in have a trailing new-line (#1814976)�x�+m��Rob Crittenden <rcritten@redhat.com> - 0.78.4-12]A��- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit man page (#1651368) - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781) - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727) - Document owner and permission parameters to getcert (#1549585) X XWh � X �z�4u��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^�- ci-Removing-cloud-user-from-wheel.pat � �3u�G�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el7^p��- Rebase to 19.4 [bz#1803094] - Resolves: bz#1803094 ([RHEL-7.9] cloud-init rebase to 19.4)�k�2u�c�Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7]��@- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526] - Resolves: bz#1744526 ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)�}�1u��Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el7]w�@- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010] - Resolves: bz#1593010 ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])�$�0m�]�Rob Crittenden <rcritten@redhat.com> - 0.78.4-17an�@- certmonger creates CSRs with invalid DER syntax for X509v3 extensions with critical=FALSE (#2015511) ch [bz#1549638] - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015] - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170] - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173] - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338] - Resolves: bz#1549638 ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase) - Resolves: bz#1574338 (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7]) - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1812170 (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7]) - Resolves: bz#1812173 (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7]) + �� + �@�7u� �Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��6u��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��5u��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^��@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) q Yq �d�9u�U�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�#�8u�S�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � �W � �z�<u��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^�- ci-Removing-cloud-user-from-wheel.pat � �;u�G�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-1.el7^p��- Rebase to 19.4 [bz#1803094] - Resolves: bz#1803094 ([RHEL-7.9] cloud-init rebase to 19.4)��:i�!�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z]) ch [bz#1549638] - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015] - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170] - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173] - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338] - Resolves: bz#1549638 ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase) - Resolves: bz#1574338 (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7]) - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1812170 (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7]) - Resolves: bz#1812173 (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7]) + �� + �@�?u� �Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��>u��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��=u��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^��@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) q Yq �d�Au�U�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�#�@u�S�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � � � �#�Ci�_�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])��Bi�!�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z]) Y �ja Y ��Gu��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��Fu��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^��@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)�z�Eu��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7^s^�- ci-Removing-cloud-user-from-wheel.pat �#�Di�_�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) ch [bz#1549638] - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015] - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170] - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173] - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338] - Resolves: bz#1549638 ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase) - Resolves: bz#1574338 (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7]) - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1812170 (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7]) - Resolves: bz#1812173 (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7]) � < � �#�Iu�S�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�@�Hu� �Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) ��Ki�!�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])�d�Ju�U�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � �� � �F�Ni�%�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+��- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807] - Resolves: bz#1900807 (Update existing user password RHEL7x)�#�Mi�_�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])�#�Li�_�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) + �� + �@�Qu� �Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��Pu��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)��Ou��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7^��@- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) q Yq �d�Su�U�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�#�Ru�S�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � � � �#�Ui�_�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])��Ti�!�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z]) � ��Yu��Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7^��@- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505] - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)�n�X}�a�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5`� @- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616] - Resolves: bz#1897616 ([rhel-7]cloud-final.service fails if NetworkManager not installed.)�F�Wi�%�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+��- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807] - Resolves: bz#1900807 (Update existing user password RHEL7x)�#�Vi�_�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) � < � �#�[u�S�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-6.el7^�>@- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015] - ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)�@�Zu� �Miroslav Rezanina <mrezanin@redhat.com> - 19.4-5.el7^��@- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015] - ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505] - Resolves: bz#1748015 ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok)) - Resolves: bz#1772505 ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init) ��]i�!�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.2_��- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619] - ci-Changing-notation-of-subp-call.patch [bz#1839619] - ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916] - Resolves: bz#1839619 ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z]) - Resolves: bz#1871916 ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])�d�\u�U�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7^��- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999] - Resolves: bz#1821999 ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log) � �� � �F�`i�%�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.4`+��- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807] - Resolves: bz#1900807 (Update existing user password RHEL7x)�#�_i�_�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])�#�^i�_�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.3_���- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871] - Resolves: bz#1861871 - ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z]) { � { � �es�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�dsu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�c�Y�Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� �bi�+�Jon Maloy <jmaloy@redhat.com> - 19.4-7.el7_9.6a�- ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231] - Resolves: bz#2003231 (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)�n�a}�a�Miroslav Rezanina <mrezanin@redhat.com> - 19.4-7.el7_9.5`� @- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616] - Resolves: bz#1897616 ([rhel-7]cloud-final.service fails if NetworkManager not installed.) � s�t�[ � �Q�k�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��j�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �is�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�hsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��gs�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �fs�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1. B r�\�6 � B � �rs�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�qsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��ps�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �os�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �ns�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�msu�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �l���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected. m u�� � m � �xs�!�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �ws�I�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�v�g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �u���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�t�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��s�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize. � gs� � � �~���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�}�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��|�� �Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �{s�#�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�zsW�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��ys�9�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. W ��F�u � W � �e�7�Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109m�qm�Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y�m��Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256�C� ���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t��g�Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. > ��y � � > m� qm�Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^� e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y� m��Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256r� yo�Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b�@- Remove timezone boundaries Resolves: #2098262v� a� �Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�m� �Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��m�;�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�mw�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289 m s�o�[ � m r�yo�Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b�@- Remove timezone boundaries Resolves: #2098262v�a� �Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�m� �Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��m�;�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�mw�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �e�7�Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109 Y 7�Z�] � Y p�mw�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �e�7�Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109m�qm�Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y�m��Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256�E�i�#�Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z� �+ control-center-3.26.2-8 - Fix Wi-Fi networks not getting updated - Show "Wi-Fi disabled" page when Wi-Fi is disabled - Resolves: #1545713 ] i�s�. � ] m�"qm�Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�!e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y� m��Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256�E� i�#�Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z� �+ control-center-3.26.2-8 - Fix Wi-Fi networks not getting updated - Show "Wi-Fi disabled" page when Wi-Fi is disabled - Resolves: #1545713v� a� �Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z� m� �Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154�� m�;�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643 e �r+��V��: � � e D�P � 99812ac04e29b031870c5675a4888ceb7ec75a205bace3fe8e9339e91f0e8109D�O � adf023be78972d5813085a5facdbea98c19687e2f35459fa6060b6c2fded31a9D�N � c6c5c2f11ff4c5bdd22deb3a88852ae012482664acb196d328e4b290495979edD�M � 2bf6c6071be41d65c91d31c9399563bd6d9298e9a9911c2cfff1bae35d4209feD�L � 298ea0c2efac5573e322e25503e2c30d52bb589fa8ef1cc0df2ba4f2bbbfd3c3D�K � c5fc7f37feaeaf11068007f084d0a7046d1674006226de685b890730ee95e3c5D�J � 5f7f4b24a0e71345d5407d27b3ec2dba93f549f3873d99c73c1a6b6d5527120bD�I � 69d4fb9319ca5a9e4cae9e47996216cc1f227003389290e9e68c05911af73d15D�H � f3f69f58e04b244b740beae57319f782363f8a8bfaacea37bca6ed2cb7d1cd2eD�G � 1cb1df73a2743fe17a9ccf9a82ba1339ff309d7912d173c10e2a3e8ef400fcffD�F � 2009ebe5d0c47032c5784190a92c5dfb2abdff45270eabce812d7641915b2fb6D�E � 88829e504b63e6f7b3b0f74d257ab87d6d2ac4c04e4220a90e33576fdc11d02fD�D � 6a71d3f89673ae6444441f6f1e25eb47a4347ba95f13345e2fcfcdfda313670b f s�o�[ � f y�)m��Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256v�(a� �Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�'m� �Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��&m�;�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�%mw�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �$e�7�Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �#m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109 � �/�� � z�0m� �Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��/m�;�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�.mw�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �-e�7�Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880� �,m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109m�+qm�Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�*e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179 o �I�l � o � �7m�'�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-3[(�@- Remove outdated soft hyphens from Japanese translation - Resolves: #1519109m�6qm�Christian Kellner <ckellner@redhat.com> - 3.28.1-2[ d@- Include thunderbolt panel - Resolves: #1567179^�5e[�Kalev Lember <klember@redhat.com> - 3.28.1-1Z�n�- Update to 3.28.1 - Resolves: #1567179y�4m��Carlos Garnacho <cgarnach@redhat.com> - 3.26.2-9Z��- Add support for Wacom Pro Pen 3D styli Resolves: #1557256�E�3i�#�Bastien Nocera <bnocera@redhat.com> - 3.26.2-8Z� �+ control-center-3.26.2-8 - Fix Wi-Fi networks not getting updated - Show "Wi-Fi disabled" page when Wi-Fi is disabled - Resolves: #1545713r�2yo�Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.1-8.1b�@- Remove timezone boundaries Resolves: #2098262v�1a� �Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431 L o�e�o � L x�>Y��Jiri Vanek <jvanek@redhat.com> - 1.2-1W��- updated to 1,3 which fixing nss minor issue - Resolves: rhbz#1296430�$�=Y�q�Jiri Vanek <jvanek@redhat.com> - 1.1-5W��- posttrans silenced, the error is appearing only in state, when there is nothing to copy - Resolves: rhbz#1296430v�<a� �Marek Kasik <mkasik@redhat.com> - 3.28.1-8`KW�- Enable Printers panel in all environments - Resolves: #1559431z�;m� �Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-7^� �- Categorize Infiniband devices correctly Resolves: #1630154��:m�;�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]L�- Calculate better extents for the configured displays arrangement Resolves: #1591643p�9mw�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]J�@- Fix crash in thunderbolt panel Resolves: #1672289� �8e�7�Kalev Lember <klember@redhat.com> - 3.28.1-4[�s�- Backport two additional upstream patches for thunderbolt panel - Resolves: #1594880 U qJ�n � U ��DY�/�Jiri Vanek <jvanek@redhat.com> - 3.3-3Z�m�- fixes issue when java.security for openjdk7 was erased - Resolves: rhbz#1571854��CY�E�Jiri Vanek <jvanek@redhat.com> - 3.3-2Y�ZA- added another subdirs for policies files - Resolves: rhbz#1503647 - Resolves: rhbz#1503668t�BY��Jiri Vanek <jvanek@redhat.com> - 3.3-1Y�Z@- updated to 3.3 - Resolves: rhbz#1503647 - Resolves: rhbz#1503668b�AYo�Jiri Vanek <jvanek@redhat.com> - 2.2-3YG��- updated to latest head - Resolves: rhbz#1427463�#�@Y�o�Jiri Vanek <jvanek@redhat.com> - 2.2-1Y?�- added "jre/lib/security/blacklisted.certs" to cared files - moved to newest release 2.1 - moved to new upstream at pagure.io - added new script of copy_jdk_configs_fixFiles.sh - copy_jdk_configs.lua aligned to it - Resolves: rhbz#1427463� �?Y�?�Jiri Vanek <jvanek@redhat.com> - 1.3-1X@�- updated to upstream 1.3 (adding jre/lib/security/cacerts file) - Resolves: rhbz#1399719 1 � � 1 �g�Ha�o�Ondrej Vasik <ovasik@redhat.com> - 8.22-18Wv[@- fix xfs build failure in chrooted environment (#1263341) - update filesystem lists for stat and tail from latest upstream (#1327881, #1280357) - disable id/setgid.sh test(missing chroot feature), fix cp-a-selinux test (#1266500,#1266501) - colorls.sh - change detection of interactive shell for ksh compatibility (#1321648) - fix date --date crash with empty or invalid TZ envvar (#1325786) - df -l: do not hang on a dead autofs mount point (#1309247) - sort -h: fix functionality of human readable numeric sort for other than first field (#1328360)n�Ga�Ondrej Vasik <ovasik@redhat.com> - 8.22-16VU��- cp: prevent potential sparse file corruption (#1284906)~�F[�#�Jiri Vanek <jvanek@redhat.com> - 3.3-11[�R@- Fixing deletation ofemtpy dirs via rogue symlink - Resolves: rhbz#2100617o�E[��Jiri Vanek <jvanek@redhat.com> - 3.3-10Z�@- added javaws.policy and blacklist - Resolves: rhbz#1571854 � �� � �>�M_� �Kamil Dudka <kdudka@redhat.com> - 8.22-23[#�@- update description of the -a/--all option in df.1 man page (#1553212) - sort -M: fix memory leak when using multibyte locale (#1540059)h�L_u�Kamil Dudka <kdudka@redhat.com> - 8.22-22Zhu@- mv -n: do not overwrite the destination (#1526265)r�K_��Kamil Dudka <kdudka@redhat.com> - 8.22-21Z%8�- timeout: revert the last fix for a possible race (#1439465)��J_�%�Kamil Dudka <kdudka@redhat.com> - 8.22-20Z�@- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)�p�I_��Kamil Dudka <kdudka@redhat.com> - 8.22-19Yé�- timeout: fix race possibly terminating wrong process (#1439465) - ls: allow interruption when reading slow directories (#1421802) - fold: preserve new-lines in mutlibyte text (#1418505) � �!� d�Po]�Kamil Dudka <kdudka@redhat.com> - 8.22-24.el7_9.2_�- sync: fix open fallback bug (#1850682)r�Ooy�Kamil Dudka <kdudka@redhat.com> - 8.22-24.el7_9.1^��- sync: support syncing specified arguments (#1850682)�f�N_�o�Kamil Dudka <kdudka@redhat.com> - 8.22-24\���- doc: improve description of the --kibibytes option of ls (#1527391) - doc: fix typo in date example (#1620624) - stat,tail: sync the list of file systems with coreutils-8.31 (#1659530) - df: avoid stat() for dummy file systems with -l (#1668137) - df: prioritize mounts nearer the device root (#1042840) S \ � S ��S_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�R_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �Q_�c�Jan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�Vcu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�Uc�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�T_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�X_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��W_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�]_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��\_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�[_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�Zc�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�Y_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � M� � ��`_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�_cu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�^c�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > ��dc�G�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�cc�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�b_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j�a_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) S \ � S ��g_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�f_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �e_�c�Jan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�jcu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�ic�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�h_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�l_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��k_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�q_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��p_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�o_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�nc�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�m_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � M� � ��t_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�scu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�rc�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > ��xc�G�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�wc�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�v_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j�u_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) S \ � S ��{_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�z_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �y_�c�Jan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�~cu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�}c�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�|_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j� _�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�c�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � M� � ��_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�cu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�c�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > �� c�G�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[� c�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y� _�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j� _�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) S \ � S ��_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� � _�c�Jan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�cu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�c�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �Q !�S "�U #�Y $�[ %�] &�` '�e (�k )�r *�x +�~ ,� -� .� /� 0�" 2�) 3�0 4�7 5�> 6�D 7�H 8�M 9�P :�S ;�V <�X =�] >�` ?�d @�g A�j B�l C�q D�t E�x F�{ G�~ H� I� J� K� L� M� N� P� Q� R� S� T�# V�& W�* X�/ Y�1 Z�4 [�7 \�: ]�< ^�> _�A `�D a�F b�K c�N d�R e�W f�Y g�^ h�c i�i j�o k�u l�{ m� n� o� p� q� r� s�! t�' v�, w�1 x�7 y�; z�? {�D |�K }�O ~�T �X ��] ��b ��g ��m ��r ��w ��| �� �� �� �� �� �� ��% ��) ��. ��2 ��7 ��< D #D �[�c�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) S \ � S ��_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �_�c�Jan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j� cu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�c�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j� _�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)�� _�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�#_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��"_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�!_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[� c�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y� _�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) e �r+��V��: � � e D�] � 93e5893e2543f24cc6076a35548745fc96be00bd8f9960f8645d41100dcf0c3aD�\ � 87818b04247bfad1a3a5ad6b7d4ba90f571e7df0d267da4a66fd5e1e17409c65D�[ � 596130fb4480b497134f1ceee905500a7718c15559963c2786a784a511011077D�Z � 64c5a32d35ccc6312c43d89cfee42872bacebecc43ec10e09f90916daedb80daD�Y � f19ef75ad99fd28a32063032985acd16eed69a49de7940fe80fe25a45d7b20d5D�X � 9b1fd6f75c44990182608f11437d29610a09c14eef6cd15e358d8dc204c067a6D�W � 21cd1d5d48d73a90f3072f23c5e4e21283dbd047dba314b528013a884054068eD�V � 8a874d1a0c3f0dce30ef48f0095dafcb59e864b2b89528a61ee1b1d0a5dcfb7fD�U � 68ee3d48388315e955a81bc549710f8201b486ea8413b2e63a516ea8d40e5534D�T � d413e9756d3b6aece12ea946151d51900d80c7fc73dbaac617ca6d4212d49e38D�S � 26c0bf18af70ee3cb9525c40bdea17bad250aa0b3b0200dd8132b995dc4081a9D�R � 547e7d5fe595fcb6ed9634585475a0cdf56327add42e4ccd74358d8c4a27b140D�Q � e5654c00b989b0595c553eaf073114c219aec1d06fb9571ebdcebbdfef5a90d5 � M� � ��&_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�%cu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�$c�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > ��*c�G�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�)c�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�(_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j�'_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) � �� j � j�/cu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�.c�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�-_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��,_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�+_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage v � v �j�1_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��0_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) � #D� ��4c�G�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�3c�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�2_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) S \ � S ��7_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�6_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �5_�c�Jan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�:cu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�9c�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�8_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�<_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��;_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) D #D �[�>c�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�=_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) S \ � S ��A_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�@_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage� �?_�c�Jan Friesse <jfriesse@redhat.com> 2.4.3-5\�|�- Resolves: rhbz#1376819 - Resolves: rhbz#1634710 - configure: add --with-initconfigdir option (rhbz#1376819) - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819) - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819) - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819) - totemcrypto: Fix importing of the private key (rhbz#1634710) - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710) - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819) - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819) &s j�Dcu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�Cc�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�B_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492) v � v �j�F_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��E_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) a #D�; a �V�K_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��J_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�I_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage�[�Hc�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�G_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � M� � ��N_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)j�Mcu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�Lc�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition > �� � > ��Rc�G�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�Qc�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�P_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)�j�O_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885) � �� j � j�Wcu�Jan Friesse <jfriesse@redhat.com> - 2.4.5-4]J�@- Related: rhbz#1737884 - Enhance spausedd makefile�/�Vc�}�Jan Friesse <jfriesse@redhat.com> - 2.4.5-3]Ik�- Resolves: rhbz#1737884 - Resolves: rhbz#1737887 - Do not set exec permission for service file - Fix CFLAGS definition�V�U_�O�Jan Friesse <jfriesse@redhat.com> 2.4.5-2]@1A- Resolves: rhbz#1656492 - totem: Increase ring_id seq after load (rhbz#1656492) - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)��T_�Y�Jan Friesse <jfriesse@redhat.com> 2.4.5-1]@1@- Resolves: rhbz#1732039 - Resolves: rhbz#1153818 - Resolves: rhbz#1647120 - Rebase to Corosync 2.4.5g�S_s�Jan Friesse <jfriesse@redhat.com> 2.4.3-6\�|�- Resolves: rhbz#1542703 - Add spausedd subpackage v � v �j�Y_�w�Jan Friesse <jfriesse@redhat.com> 2.4.5-6^ϧ�- Resolves: rhbz#1835885 - stats: Add basic schedule-miss stats to needle (rhbz#1835885) - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885) - main: Add schedmiss timestamp into message (rhbz#1835885) - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)��X_�S�Jan Friesse <jfriesse@redhat.com> 2.4.5-5^y�@- Resolves: rhbz#1679792 - Resolves: rhbz#1780134 - votequorum: Ignore the icmap_get_* return value (rhbz#1780134) - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134) - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134) - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134) - votequorum: set wfa status only on startup (rhbz#1679792) - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792) � #D�& � k�^gs�Dave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues Resolves: rhbz#1559758��]g� �Dave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201 Resolves: rhbz#1559460��\c�G�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.2av�@- Resolves: rhbz#2001969 - totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)�[�[c�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7.1`��- Resolves: rhbz#1896311 - Resolves: rhbz#1897087 - spausedd: Fix log_perror (rhbz#1896311) - spausedd: Add ability to move process into root cgroup (rhbz#1897087)�Y�Z_�U�Jan Friesse <jfriesse@redhat.com> 2.4.5-7^�3�- Related: rhbz#1835885 - main: Make schedmiss in cmap and log equal (rhbz#1835885) - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885) � 9��D � �:�cg��Dave Anderson <anderson@redhat.com> - 7.2.3-9\,��- Alternate list loop detection option Resolves: rhbz#1595389 - Readline library tab completion plugin Resolves: rhbz#1656165�&�bg�g�Dave Anderson <anderson@redhat.com> - 7.2.3-8[��@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. Resolves: rhbz#1617936�1�ag�}�Dave Anderson <anderson@redhat.com> - 7.2.3-7[�Q@- Support ppc64 increased VA range - Fix ppc64 "bt" command failure reporting invalid NIP value Resolves: rhbz#1617936��`g�?�Dave Anderson <anderson@redhat.com> - 7.2.3-6[?Y�- Fix for RHEL7 kernel's eBPF support that uses old IDR facility Resolves: rhbz#1559758�C�_g�!�Dave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa Resolves: rhbz#1559460 - Fix ppc64/ppc6le stacksize calculation Resolves: rhbz#1589685 | ��7�C | �C�ig�!�Dave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa Resolves: rhbz#1559460 - Fix ppc64/ppc6le stacksize calculation Resolves: rhbz#1589685k�hgs�Dave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues Resolves: rhbz#1559758��gg� �Dave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201 Resolves: rhbz#1559460�8�fo��Bhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8�- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction Resolves: rhbz#1854016��ei�5�Dave Anderson <anderson@redhat.com> - 7.2.3-11\���- Fix to prevent display of invalid "timer" command entries Resolves: rhbz#1818084x�di� �Dave Anderson <anderson@redhat.com> - 7.2.3-10\4��- Restrict command line to 1500 bytes Resolves: rhbz#1663792 @ j� M � @ ��oi�5�Dave Anderson <anderson@redhat.com> - 7.2.3-11\���- Fix to prevent display of invalid "timer" command entries Resolves: rhbz#1818084x�ni� �Dave Anderson <anderson@redhat.com> - 7.2.3-10\4��- Restrict command line to 1500 bytes Resolves: rhbz#1663792�:�mg��Dave Anderson <anderson@redhat.com> - 7.2.3-9\,��- Alternate list loop detection option Resolves: rhbz#1595389 - Readline library tab completion plugin Resolves: rhbz#1656165�&�lg�g�Dave Anderson <anderson@redhat.com> - 7.2.3-8[��@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. Resolves: rhbz#1617936�1�kg�}�Dave Anderson <anderson@redhat.com> - 7.2.3-7[�Q@- Support ppc64 increased VA range - Fix ppc64 "bt" command failure reporting invalid NIP value Resolves: rhbz#1617936��jg�?�Dave Anderson <anderson@redhat.com> - 7.2.3-6[?Y�- Fix for RHEL7 kernel's eBPF support that uses old IDR facility Resolves: rhbz#1559758 > D�P� � > �1�ug�}�Dave Anderson <anderson@redhat.com> - 7.2.3-7[�Q@- Support ppc64 increased VA range - Fix ppc64 "bt" command failure reporting invalid NIP value Resolves: rhbz#1617936��tg�?�Dave Anderson <anderson@redhat.com> - 7.2.3-6[?Y�- Fix for RHEL7 kernel's eBPF support that uses old IDR facility Resolves: rhbz#1559758�C�sg�!�Dave Anderson <anderson@redhat.com> - 7.2.3-5[ d@- Rebase to github commits b9d76838 to c79a11fa Resolves: rhbz#1559460 - Fix ppc64/ppc6le stacksize calculation Resolves: rhbz#1589685k�rgs�Dave Anderson <anderson@redhat.com> - 7.2.3-4[5A- Fix bpf.c covscan issues Resolves: rhbz#1559758��qg� �Dave Anderson <anderson@redhat.com> - 7.2.3-3[5@- Rebase to github commits a6cd8408 to da49e201 Resolves: rhbz#1559460�8�po��Bhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8�- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction Resolves: rhbz#1854016 Y V� � � Y s�{e��Tomáš Mráz <tmraz@redhat.com> - 1.4.11-15V�I�- crontab: use temporary filename properly ignored by crond�8�zo��Bhupesh Sharma <bhsharma@redhat.com> - 7.2.3-11.1_k8�- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction Resolves: rhbz#1854016��yi�5�Dave Anderson <anderson@redhat.com> - 7.2.3-11\���- Fix to prevent display of invalid "timer" command entries Resolves: rhbz#1818084x�xi� �Dave Anderson <anderson@redhat.com> - 7.2.3-10\4��- Restrict command line to 1500 bytes Resolves: rhbz#1663792�:�wg��Dave Anderson <anderson@redhat.com> - 7.2.3-9\,��- Alternate list loop detection option Resolves: rhbz#1595389 - Readline library tab completion plugin Resolves: rhbz#1656165�&�vg�g�Dave Anderson <anderson@redhat.com> - 7.2.3-8[��@- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. Resolves: rhbz#1617936 s �D�* s �3� a��Marcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�eq�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�~e�q�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �}e�[�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed)��|e�G�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current context t ��r� t ��e�G�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current context�a�e�_�Jan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�a�Marcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730��a�W�Marcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�a��Marcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111 o ]�C� o �� a�W�Marcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{� a��Marcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111�3� a��Marcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�eq�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�e�q�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �e�[�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed) { �� � { ��e�G�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current contexts�e��Tomáš Mráz <tmraz@redhat.com> - 1.4.11-15V�I�- crontab: use temporary filename properly ignored by crond� �y�A�Ondřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update - Resolves: rhbz#2059479�a� e�_�Jan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n� a�Marcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730 o ]�C� o ��a�W�Marcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�a��Marcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111�3�a��Marcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�eq�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�e�q�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �e�[�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed) @ ��� � @ �*�e�q�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �e�[�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed)��e�G�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current context�a�e�_�Jan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�a�Marcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730 j ��_�O j �a�!e�_�Jan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n� a�Marcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730�� a�W�Marcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{� a��Marcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111�3� a��Marcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i� eq�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726) `��. � i�'eq�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�&e�q�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �%e�[�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed)��$e�G�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current contexts�#e��Tomáš Mráz <tmraz@redhat.com> - 1.4.11-15V�I�- crontab: use temporary filename properly ignored by crond� �"y�A�Ondřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update - Resolves: rhbz#2059479 e �r+��V��: � � e D�j � fbcc3e564c6dca446a39edd03f346e88b9881d9d18050e89024d0ff48b46240aD�i � 030d403b90d83c7791ba3ea26cc659f709c596898fbfbd5d5f6e4b737a1293faD�h � 4fa63e9cbed9669fb646f612b5c9371ba7bd3f11e6ce5059f28af1cdc7da0780D�g � 80bfd0e65eafbe59f9079ccbd7a8c303269a333e10aaddfce933c3cc81907c66D�f � 964701bf20ea9285610ce775b493e6d79bf2f27999d29ccbdc6ac91eb4261ce9D�e � 801be54b282724d9d09516d698bc641c19471a40f11821cbf51804f40228e59aD�d � 902507007b4e5ee04bd47f98345b605b7cce177b0569460eb0efb299a91918e5D�c � e4bb7031f520b296dbe56b80bca148b9f8409329cef2007dd5a06e4548e780d3D�b � 9e8882a42b481017ad43c670ac8c75a3a878d804f43f7716f685798813397a3fD�a � 44ab9339bd5d854867709f046ee7265cdf470dcab6e44935238e9d85f50a3ffbD�` � 891dab92096ecafec7121bace38c5d802443f838cef21422beb6a451c0e0892dD�_ � 8c0e209a9b3e465d9d43e1e9e5585d8222d61a73748d1a2e8ce486e8b2b25715D�^ � d97cce4820b6ef5656963548218f0d4ff9ef7c504f16623dd12d6b73c7cf2e2f � I�,� � �a�,e�_�Jan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�+a�Marcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730��*a�W�Marcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�)a��Marcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111�3�(a��Marcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691 s �D�* s �3�1a��Marcel Plch <mplch@redhat.com> - 1.4.11-20[� @- Fix race condition when crontab is modified the same second before and after reading the crontab - Resolves: rhbz#1638691i�0eq�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-19Y�@- fix URL and source URL of the package (#1501726)�*�/e�q�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18Y���- fix regression - spurious PAM log message from crontab (#1479064) - allow empty variables in crontabs (#1439217)� �.e�[�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17Xۡ�- make anacron not to contradict itself in syslog (job output does not have to be necessarily mailed)��-e�G�Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16X���- disable mail from anacron with empty MAILTO - crontab: do not block access with PAM when running as root - improve the crontab man page - do not hardcode system_u selinux user but use the user from the current context � ��r� � � h�7ik�Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16� �6y�A�Ondřej Pohořelský <opohorel@redhat.com> - 1.4.11-25d@- Set 'missingok' for /etc/cron.deny to not recreate it on update - Resolves: rhbz#2059479�a�5e�_�Jan Staněk <jstanek@redhat.com> - 1.4.11-24a���- Limit memory allocated for file descriptors Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c Resolves: rhbz#2026289n�4a�Marcel Plch <mplch@redhat.com> - 1.4.11-23\d�- Make cronie restart on failure - Resolves: rhbz#1651730��3a�W�Marcel Plch <mplch@redhat.com> - 1.4.11-22\l@- Backport upstream patch to fix cron failing on smart card authentication - Resolves: rhbz#1650314{�2a��Marcel Plch <mplch@redhat.com> - 1.4.11-21[��- Backport upstream patch to fix -P behavior - Resolves: rhbz#1536111 � I�f� w�;k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�:k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�9ii�Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�8k�}�Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-join � � � ��?k��Andreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��>k�%�Andreas Schneider <asn@redhat.com> - 4.10.17-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�=iq�Andreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�<i�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage * {� * �p�Di�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew�Ck��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�Bk��Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�Aii�Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires��@k��Andreas Schneider <asn@redhat.com> - 4.10.17-13`�@- related: #1876839 - Fix double crash when requesting share mode lock ( ��� � ( w�Kk��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagc�Jk_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�Ik�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��Hk��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��Gk��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��Fk�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�Eiq�Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks � � � ��Ok��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��Nk�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�Miq�Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p�Li�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � {�!M � z�Tk� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�Sk�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�Rk_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�Qk�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��Pk��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ��Xk��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��Wk�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�Viq�Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p�Ui�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � {�!M � z�]k� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�\k�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�[k_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�Zk�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��Yk��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � �� � ��bk��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��ak��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��`k�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�_iq�Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�{�^k� �Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 V ��U V �{�gk� �Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z�fk� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�ek�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�dk_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�ck�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services W G�6� � W c�mk_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�lk�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��kk��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��jk��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��ik�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issues�5�hk��Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict � ,�� � � q�rk{�Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�qk��Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�pk� �Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z�ok� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�nk�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl � {�!M � z�wk� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�vk�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�uk_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�tk�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��sk��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � H�n � z�|k� �Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c�{k_�Andreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q�zk{�Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�yk��Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�xk� �Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 1 �/�S � 1 �3�k�}�Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�ik�Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m�iu�Andreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi� im�Andreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU�iE�Andreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057|�~k��Isaac Boukris <iboukris@redhat.com> - 4.10.15-2^��- resolves: #1825505 - Compilation of samba sources fails on RHEL�v�}i��Andreas Schneider <asn@redhat.com> - 4.10.15-1^���- related: #1785121 - Rebase to version 4.10.15 - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of - resolves: #1801496 - Add missing ctdb directories M � �K�o M �3� k�}�Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh� ik�Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m� iu�Andreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi�im�Andreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU�iE�Andreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057w�k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�ii�Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires A � � � A k�iq�Andreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�i�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew�k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv� k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg� ii�Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires � ��t�� w�k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�ii�Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�k�}�Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�ik�Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16 � � � ��k��Andreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��k�%�Andreas Schneider <asn@redhat.com> - 4.10.17-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�iq�Andreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�i�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage * {� * �p� i�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew� k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv� k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�ii�Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires��k��Andreas Schneider <asn@redhat.com> - 4.10.17-13`�@- related: #1876839 - Fix double crash when requesting share mode lock ( ��� � ( w�%k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagc�$k_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�#k�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��"k��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��!k��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock�� k�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk� iq�Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks e �r+��V��: � � e D�w � dfc95bdd8057839d4b45153318acb4e09f4da257afee1c57c07781870a68ecefD�v � 7e50ed884e06e8b99632be1537d095f84b2961978088e061936f9dc699a523b1D�u � ae5e89ffdb193ba77fff5f91338b3087497c816b899809d1d303e53d659e4ea3D�t � 438a67adb5128df187df7f5745a6afe2d244d1571ecaf4159b03356b32a60436D�s � 36577f1cf5cefd40798e73d112856b462b3290fa90abd70553c107f45542a070D�r � 589706b3e3179980b4ac5c2328bf6ff3d88a995174ce4fa64d0ad480965e67c2D�q � 88400b854d053822b230b8e0402132b7559ddccd811a7abcedeb1406f7bd8cbdD�p � 3f56b1a9c01d9d56c7c61e5e85f89f379f66270b55c609f84ba58194ac11e489D�o � efa403ad1b6d2564bce0ec54cef3ee401c15f4282733a928d75bb703119161b5D�n � 56345477656cfcf05709f7ed9a7e36814bd7eda39a49f2d5fc436d774aef8e06D�m � b6282c4c1e703d703b92a52a9f3959b4a6412072b5923853674734d4920eb1eeD�l � 650ecdc0d3c0f2d221347461dc47da74b9aeb8041326a30662c310db8452c289D�k � d12d34da150d926afed7f5810b9ebdc562f483d0100cdce78091fd464612301d � � � ��)k��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��(k�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�'iq�Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p�&i�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � {�!M � z�.k� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�-k�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�,k_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�+k�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��*k��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ��2k��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��1k�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�0iq�Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p�/i�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � {�!M � z�7k� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�6k�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�5k_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�4k�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��3k��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � �� � ��<k��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��;k��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��:k�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�9iq�Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�{�8k� �Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 V ��U V �{�Ak� �Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z�@k� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�?k�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�>k_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�=k�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services W G�6� � W c�Gk_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�Fk�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��Ek��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��Dk��Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��Ck�%�Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issues�5�Bk��Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict � ,�� � � q�Lk{�Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�Kk��Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�Jk� �Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z�Ik� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�Hk�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl � {�!M � z�Qk� �Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�Pk�7�Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�Ok_�Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�Nk�w�Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��Mk��Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � H�n � z�Vk� �Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c�Uk_�Andreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q�Tk{�Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�Sk��Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�Rk� �Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 1 �/�S � 1 �3�]k�}�Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�\ik�Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m�[iu�Andreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi�Zim�Andreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU�YiE�Andreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057|�Xk��Isaac Boukris <iboukris@redhat.com> - 4.10.15-2^��- resolves: #1825505 - Compilation of samba sources fails on RHEL�v�Wi��Andreas Schneider <asn@redhat.com> - 4.10.15-1^���- related: #1785121 - Rebase to version 4.10.15 - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of - resolves: #1801496 - Add missing ctdb directories M � �K�o M �3�ek�}�Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�dik�Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m�ciu�Andreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi�bim�Andreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU�aiE�Andreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057w�`k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�_k��Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�^ii�Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires A � � � A k�jiq�Andreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�ii�y�Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew�hk��Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�gk��Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�fii�Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires a c�R�J � a t�qi��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�piy�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed� �oi�1�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u�ni��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502��mi�!�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters��li�#�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found��k_�U�Tim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279). ( [�N�( � ( u�xi��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502��wi�!�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters��vi�#�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found��u_�U�Tim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��ti�C�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq�si}�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown�!�ri�[�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memory 8 p���n � 8 ��_�U�Tim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��~i�C�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq�}i}�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown�!�|i�[�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�{i��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�ziy�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed� �yi�1�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6 Y w�w�u � Y �!�i�[�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�i��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�iy�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed� �i�1�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u�i��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502��i�!�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters�� i�#�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found = ��V�E � = � � i�1�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u� i��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502�� i�!�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters�� i�#�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found�� _�U�Tim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��i�C�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq�i}�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown ? �r�e � ? ��i�#�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-22X� @- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found��_�U�Tim Waugh <twaugh@redhat.com> - 1.0.35-21U�b@- Fix heap-based buffer overflow in texttopdf filter (bug #1241242, CVE-2015-3258, CVE-2015-3279).��i�C�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue clusterq�i}�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown�!�i�[�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�i��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�iy�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed n x p�� � n q�i}�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^y�@- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown�!�i�[�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-28^x��- 1816109 - Queues are not cleaned up after stopping cups-browsed - 1811190 - cups-browsed leaks memoryt�i��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-27]��@- 1775776 - Updated cups-browsed in RHEL 7.7 leaks socketso�iy�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-26\��@- 1508018 - man pages: wrong links in man cups-browsed� �i�1�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-25\�@- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6u�i��Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-24\��@- fixing covscan issues, backported from upstream - 1485502��i�!�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-23\mA@- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters c g�P � c j� cu�Kamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}� c��Kamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� � c�1�Kamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)�� c�+�Kamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)�� i�C�Zdenek Dohnal <zdohnal@redhat.com> - 1.0.35-29b��@- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster O ��$�# � O d�(ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�'io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)v�&s}�Kamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)��%c�'�Kamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)��$c�%�Kamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h�#cq�Kamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|�"c��Kamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h�!cq�Kamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436) e �r+��V��: � � e D� � ffcf7016d990141a16d89aca74ebc89f797e93581bb8c97a08c83f5bf4ae47e4D� � e1d065bfaef705d407c6134352d1afc64ecf26a5970a0e5282f6dda745483db8D� � 4579c7a7925097881dd33b28c72cce227a024a5f071fa4cd0c5bb09cd76d8ec0D� � 4a53adae3dd3a8d933f2ec113b7303ce7d9c782edd612d17b8d3badf4c04167eD� � 46ac94286722fc2f6f68ec4c0e70152b3d1ff6fac6001d2155f8228d91126574D� � 816c816facf8421458376b99f244ef91c147063ed4f4955fd0e8dae62eccaeb8D�~ � c75dd0b94b1e1300b04edfbfa5a3739573a6f83dc0737110d2f8cfedfc5ab7a2D�} � da2b0ffc968803d239f38444842e6792e85494901ff8d0075652f6c2d7aa1800D�| � 46f713cd31041330e2739c5a644e4f598536096f3e39d6c667a6d044eaa87893D�{ � b2e43341cc469f66b5495139b62a419c0c671b19535efcdc79df055cc43686e5D�z � cf7edef3f54d6a2816515812d2f679ae21bbfb26767bf64e34b73d19a3bce3aeD�y � 8180d23815951b3c5be397846577728116502dad35bbc2dd67b7c4188244e465D�x � 5a07757ffcab76dc74eef1e1537c4ea823f723bae2c05ab1dd29679d95478db1 J ��" � J a�-cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�,_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��+c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��*_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479)N�)a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24 � �)�U�� N�3a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�2ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�1io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�0]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�/cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193)n�.c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586) * �s � � * n�8c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�7cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�6_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��5c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��4_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�=a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�<ci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�;io�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�:]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�9cg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�Bc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�Acc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�@_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��?c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��>_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�Ga?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�Fci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�Eio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�D]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�Ccg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�Lc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�Kcc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�J_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��Ic�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��H_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�Qa?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�Pci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�Oio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�N]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�Mcg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�Vc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�Ucc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�T_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��Sc�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��R_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�[a?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�Zci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�Yio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�X]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�Wcg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�`c}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�_cc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�^_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��]c�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��\_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�ea?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�dci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�cio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�b]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�acg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�jc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�icc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�h_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��gc�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��f_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�oa?�Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�nci�Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�mio�Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�l]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�kcg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�tc}�Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�scc�Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�r_��Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��qc�#�Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��p_�)�Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�ya? Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�xci Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�wio Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�v]o�Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�ucg�Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�~c} Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�}cc Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�|_� Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��{c�# Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��z_�) Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�a?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�ciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d� ]o Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�cg Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�_�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N� a?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d� ciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j� ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d� ]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c� cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�_�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�a?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�ciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n� c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�_�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��c�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�!a?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d� ciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j� ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d� ]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c� cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�&c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�%ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�$_�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��#c�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��"_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�+a?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�*ciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�)ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�(]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�'cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) e �r+��V��: � � e D� � 3f1d1aaf2ad1912b72db538da9e7a824ec1beb3f7eceb8da6ab8b296c810b913D� � 8c8d68b411cf4b1553f6d61ec9e5e792aab640f1b6ce5645df2f4da01896ad23D� � 8e01728503e8663cde52ff2eb87bcbcd9a04b60fa17e1729dc2658f1cce309dcD� � d008be734234764be6a4c1b2f1c97cad53b746ecc9d1086444715833c6eb8450D� � 9fc8f4ae81c019b16a882823948eff561fe0f6ad38be509f514a5c287a60d121D� � b1fa72dca82442418098746eaa9881ac7e92678c41e6786a458c28d77235fd5eD� � 4fc0e17577976ecf2487198134b9f2656bdc36caf8e27c75efb6aff14204088eD� � 925078e3fe326e7212b074bf495287d0fafc0395d9657b439a01b27d1539037eD� � c960158be24b783ab7fb4a317899b83f806692c1e48426fe46c6bee909357ee5D� � 5a42bda7621305ca3bcd588a0c84aac743aba372ea8ee558945564b62173e3f3D� � 995c318e872c57fa7ce17355320c34d3fdd0774343e691cc23d9e9215ad53931D� � 94d6c80d9b08af719fa8a5e007bf753a3f13406d99bcd8411d914c6115c3b571D� � c92bf980488dff6128c5564f2f75712ccb2a9a0f859f4667af435f967eef4c45 * �s � � * n�0c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�/ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�._�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��-c�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��,_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�5a?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�4ciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�3ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�2]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�1cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�:c}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�9ccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�8_�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��7c�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��6_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�?a?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�>ciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�=ioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�<]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�;cgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) of flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��G ��L ��Q ��V ��] ��e ��j ��q ��x �� �� �� �� �� �� ��( ��- ��3 ��8 ��= ��B ��G ��L ��Q ��V ��[ ��` ��e ��j ��o ��t ��y ��~ �� �� �� �� �� �� ��! ��& ��+ ��0 ¨5 è: Ĩ? ƨD ǨI ȨN ɨS ʨX ˨] ̨b ͨg Ψl Ϩq Шv Ѩ{ ҩ ө ԩ թ ֩ ש ة ٩" ک& ۩, ݩ0 ީ6 ߩ= �D �J �P �W �] �d �j �p �w �} � � � � � �# �) �/ �5 �< ��B ��H ��N ��U ��[ ��a ��g ��m ��s ��z �� � � � � � �& �, �3 �: * �s � � * n�Dc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�CccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�B_�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��Ac�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��@_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�Ia?Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�HciHonza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�GioPetr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�F]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�EcgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�Nc}Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�MccJakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�L_�Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��Kc�#Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��J_�)Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�Sa? Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�Rci Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�Qio Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�P]oSimo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�OcgJakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�Xc} Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�Wcc Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�V_� Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��Uc�# Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��T_�) Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�]a? Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�\ci Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�[io Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�Z]o Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�Ycg Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�bc} Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�acc Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�`_� Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��_c�# Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��^_�) Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�ga? Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�fci Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�eio Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�d]o Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�ccg Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�lc} Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�kcc Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�j_� Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��ic�# Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��h_�) Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�qa? Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�pci Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�oio Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�n]o Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�mcg Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n�vc} Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�ucc Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�t_� Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��sc�# Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��r_�) Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) �3�_ N�{a? Daniel Mach <dmach@redhat.com> - 2.1.26-17R�U�- Mass rebuild 2014-01-24d�zci Honza Horak <hhorak@redhat.com> - 2.1.26-16R�x@- Rebuild for mariadb-libs Related: #1045013j�yio Petr Lautrbach <plautrba@redhat.com> 2.1.26-15R�&�- compile cyrus-sasl with -O3 on ppc64 (#1051063)d�x]o Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�wcg Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) * �s � � * n� c} Jakub Jelen <jjelen@redhat.com> - 2.1.26-22Yé�- Allow cyrus sasl to get the ssf from gssapi (#1431586)a�cc Jakub Jelen <jjelen@redhat.com> - 2.1.26-21X�O@- support proper SASL GSS-SPNEGO (#1421663)q�~_� Jakub Jelen <jjelen@redhat.com> 2.1.26-20Va�@- GSSAPI: Use per-connection mutex where possible (#1263017)��}c�# Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2U���- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)��|_�) Jakub Jelen <jjelen@redhat.com> 2.1.26-18U\w@- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566) - Add and document ability to run saslauth as non-root user (#1188065) - Support AIX SASL GSSAPI (#1174322) - Update client library to be thread safe (#1147659) - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267) - Don't use unnecessary quotes around user description (#1082564) - Fix confusing message when config file has typo (#1022479) K �3�� � K � �[�9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348�?�[�%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441�)�W�}Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�[yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320d�]o Simo Sorce <simo@redhat.com> - 2.1.26-24b8�- Fix for CVE-2022-24407 - Resolves: rhbz#2055842c�cg Jakub Jelen <jjelen@redhat.com> - 2.1.26-23Zf�- Avoid undefined symbols on s390x (#1516193) C ^� � C � � _�9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383�4� _� Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405�P�_�CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �_�_Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481 � ��c � �?�[�%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441�)�W�}Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h� [yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320� � _�#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~� _� Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199 E s� � E �4�_� Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405�P�_�CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �_�_Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481� �[�9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348 � q�l � �)�W�}Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�[yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320� �_�#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~�_� Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199� �_�9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383 : =� : �P� _�CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �_�_Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481� �[�9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348�?�[�%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441 H�8�I �)�"W�}Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�![yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320� � _�#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~� _� Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199� � _�9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383�4� _� Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405 : =� : �P�&_�CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �%_�_Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481� �$[�9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348�?�#[�%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441 H�8�I �)�,W�}Jeff Moyer <jmoyer@redhat.com> - 62-1[~��- Rebase to v62 (Jeff Moyer) - a new monitor command / daemon - an ndctl udev rule for recording the unsafe shutdown count - smart error injection - create-namespace fix for fragmented namespaces - Resolves: bz#1610649 bz#1611833 bz#1456320h�+[yJeff Moyer <jmoyer@redhat.com> - 60.3-4[^��- Apply all patches (Jeff Moyer) - Related: bz#1456320� �*_�#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~�)_� Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199� �(_�9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383�4�'_� Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405 e �r+��V��: � � e D� � 96abc02747879aa68bd335dadad5f1e2d5ea64c519db929820194757e80af933D� � 4c4e8afba69331a45497c224ebaa7b237c5e25c3fa2dba00bb45fa49fc41aed8D� � af5e8ccb9d54f4f9b71774537a4c1e69aad8ae1b83815d24f5930bb72e20d0f8D� � 917535cc1bccdcfa4383143cc52d13f8fd161a5ec8f1037f606123737f818acfD� � 39c70285432c56fe5dd79f0d155069d48956d10fcdcac838a4590c4a44b0b521D� � 88e796afa3934d3cefb09a6a575714bdc8aede8ee6a3c6b7be0bb59a130d5efdD� � cab18530e297449d292d630ec6e205013f25a4889616836298778283e58c4646D� � e5b4fe58bfeb115113e7edd7fb472941f60801137b90d42e57b06b22865ac47dD� � a18e979a837324a9730fc3e5b08e4f228f22d46c20c0a6445f7147444b8449c3D� � 2ed2fcd8e79d8a62a374c054083792b657cb4d4668e39188deeb1ad3d72c948fD� � d7480f6ca0e1f89838274cae938826c82a1a691a1f3fa5dc9b3eda6662d64f7bD� � dd427ef9920f27966d5b507f154c88d80a03bc944b494a89f98eae387f25e950D� � b063de6c9fdc361af76d98bb3d3b31fd5ee05e120f1dc64f9ddfe77217c012c6 : =� : �P�0_�CJeff Moyer <jmoyer@redhat.com> - 65.2.el7]>�- Remove 'daxctl migrate-device-model' command. We won't support hot-plugging device dax into the memory hierarchy on RHEL 7. - Resolves: rhbz#1734153� �/_�_Jeff Moyer <jmoyer@redhat.com> - 65.1.el7]9��- Rebase to v65 - clear-errors: new command to clear errors on a namespace - monitor: remove the requirement of a default config - sanitize-dimm: allow a zero-key for secure-erase - sanitize-dimm: preserve keys after an overwrite - load-keys: fix for non-TPM keys - Fix test harness to run against the rhel7 test kernel modules - Related: rhbz#1722481� �.[�9Jeff Moyer <jmoyer@redhat.com> - 64.1-2\�e�- Fix initramfs creating by forcing installation of libnvdimm.ko - Related: bz#1634348�?�-[�%Jeff Moyer <jmoyer@redhat.com> - 64.1-1\��@- Rebase to v64.1 (Jeff Moyer) - add security commands - fix broken udev rule for dirty shutdown count - Resolves: bz#1634348 bz#1635441 ' H�8� � ' ��6{�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.46-1[�@- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)��5{�David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1[W�- network: parsing of /proc/mounts returned (bug #1572659) - netconsole: LSB header added (bug #1508489) - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)� �4_�#Jeff Moyer <jmoyer@redhat.com> - 65.6.el7_ܙ�- add space to install_items in dracut config file - Resolves: rhbz#1909233~�3_� Jeff Moyer <jmoyer@redhat.com> - 65.5.el7]w�@- Once again attempt to fix nvdimm-security.conf - Resolves: rhbz#1750199� �2_�9Jeff Moyer <jmoyer@redhat.com> - 65.4.el7]QT�- Add spaces to the add_driver directive in the dracut module - Resolves: rhbz#1740383�4�1_� Jeff Moyer <jmoyer@redhat.com> - 65.3.el7]Ik�- modify nvdimm-security.conf touse '&&' instead of ';' Without this change, the module doesn't load - Resolves: rhbz#1725405 + ���& � + c�=aiJan Macku <jamacku@redhat.com> - 9.49.53-1^Ǿ�- rwtab: Add support for chrony (bug #1838260)��<a�CJan Macku <jamacku@redhat.con> - 9.49.52-1^�x�- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)Z�;aWJan Macku <jamacku@redhat.com> - 9.49.51-1^r @- Fix inline comment - (bug #1773798)��:a�CJan Macku <jamacku@redhat.com> - 9.49.50-1^h�- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)� �9a�]Jan Macku <jamacku@redhat.com> - 9.49.49-1]Z�@- ifup-eth: Check that device name is set (bug #1741830) - Add option for IPv6 GRE tunnel (bug #1691552)�a�8a�cJan Macku <jamacku@redhat.com> - 9.49.48-1]Ik�- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977) - Configure autorelabel service to output to journal and to console if set (bug #1634661) - Fix changelog typo^�7a_Jan Macku <jamacku@redhat.com> - 9.49.47-1\��- Fix file permissions for /var/log/dmesg } � � | � } c�DsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Cs�9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Bs�!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �As�IMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�@suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�?�YMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.n�>qoJan Macku <jamacku@redhat.com> - 9.49.53-1.el7_9.1_���- rwtab: Allow updating mlocate.db (bug #1880095) n r�� n � �Js�IMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�IsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �H��Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�G�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��F�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Es�#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load. � s�t�[ � �Q�P�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��O�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Ns�#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�MsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Ls�9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Ks�!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1. @ r�Z�4 � @ � �Ws�#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�VsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Us�9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Ts�!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ss�IMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�R�gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �Q��Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected. d u�� � d m�]�YMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C�\��Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�[�gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �Z��Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�Y�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��X�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize. E ��]�^ � E ��d�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �cs�#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�bsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��as�9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �`s�!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �_s�IMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�^suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details. � +�-� � � �js�!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �is�IMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�hsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�g�YMarian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� �f��Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�e�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � �p��Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�o�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��n�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �ms�#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�lsWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��ks�9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. E ��]�^ � E ��w�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �vs�#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�usWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��ts�9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �ss�!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �rs�IMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�qsuMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details. � +�&� � � �}s�!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �|s�IMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�{suMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.t�z�gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �y��Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�x�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � ���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��~s�9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. C ��[�\ � C �� �� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sWMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��s�9Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �s�!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�IMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t��gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. 1 +�&_ � 1 � �s�! Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.�C���Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t� �gMarian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� � ��Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q� �� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � ��� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �s�# Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��s�9 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. ��R�< � �� s�9 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� � s�! Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�su Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m��Y Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C��� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t��g Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. � � �� � r�#su Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �"�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�!�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.�� �� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�# Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c� sW Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. � _�9�E � ��)�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �(s�# Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�'sW Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��&s�9 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �%s�! Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �$s�I Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. _ +�&� � _ ��/s�9 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �.s�! Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �-s�I Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�,�g Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �+�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�*�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. e �r+��V��: � � e D�+ � 6cbada440eaf05d5c86416fab118a0ab641f93992a6a4070b19938894fcb8bbbD�* � 01a6f6a9a36d8203819ae336a672955e40e9b1c9cf387d5ccd0942ebea8c147aD�) � 68e1429d8531b268902804fdf15f6eb8ffcadc2d36315c6090a3edb14eb2ab13D�( � 12fb546150a8175c1aa95419a75e512972cb4c6c8eea1ade84e3319b1cfadaeaD�' � c8f7c98bcb2f070e4421790cc39453b0046912b5c8325ad6660342177869da6eD�& � e3048df9af89b5496455f0ad788ff0b492712c8c06683cf6f908894638139c9fD�% � a7f93d258bd14e3d81be8c58b2998d78081d84b5f8f763c1bff64b3571ca321eD�$ � dabd6fc3fcccc9d794b28168afdd8fb94f2d78fda10a5751459cee469f8412d4D�# � 0986dce8e3a59471cabc7ed457e23c3f0fdc81e3cbab4093eaa0426e2d5d26efD�" � 3feced91f7391352cfca0debae0c2aa43febbeee7d24929c75cd8d1d5a6b782eD�! � 06a5cb180f3ca29cdae7dd9547b29c30079ef85e1809389608777308ad5e4c3aD� � 9e77aa7192e0e6ca06b1a23c5e174410e0034b59dedc6cc1edf7458486f920edD� � 23c887a392429ec463dea994475481a04b8745d5f29926c149d6f3f48c5ebde0 � � �� � t�5�g Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �4�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�3�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��2�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �1s�# Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�0sW Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. ' 9�T�& � ' c�<sW Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��;s�9 Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �:s�! Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �9s�I Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�8su Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�7�Y Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C�6�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG. � r�� � r�Bsu!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�A�Y!Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� �@�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�?�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��>�� Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �=s�# Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load. � _�9�E � ��H�� !Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Gs�#!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�FsW!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Es�9!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Ds�!!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Cs�I!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. a +�(� � a ��Ns�9"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Ms�!"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ls�I"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�Ksu"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �J��!Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�I�� !Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. 2 � �� � 2 r�Usu#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.t�T�g"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �S��"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�R�� "Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��Q�� "Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Ps�#"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�OsW"Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. � _�9�E � ��[�� #Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Zs�##Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�YsW#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Xs�9#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Ws�!#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Vs�I#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. _ +�&� � _ ��as�9$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �`s�!$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �_s�I$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�^�g#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �]��#Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�\�� #Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � � �� � t�g�g$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �f��$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�e�� $Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��d�� $Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �cs�#$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�bsW$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. ~ 9� r ~ � �ms�#%Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�lsW%Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��ks�9%Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �js�!%Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �is�I%Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.�C�h��$Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG. d u�� � d m�s�Y&Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C�r��%Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�q�g%Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �p��%Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�o�� %Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��n�� %Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize. E ��]�^ � E ��z�� &Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �ys�#&Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�xsW&Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��ws�9&Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �vs�!&Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �us�I&Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�tsu&Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details. � +�-� � � � s�!'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�~su'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�}�Y'Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� �|��&Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�{�� &Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � ���'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� 'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� 'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �s�#'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��s�9'Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. E ��]�^ � E �� �� (Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�#(Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c� sW(Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.�� s�9(Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� � s�!(Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I(Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�su(Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details. � +�&� � � �s�!)Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I)Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�su)Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.t��g(Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� ���(Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� (Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � ���)Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q��� )Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.���� )Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �s�#)Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�sW)Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��s�9)Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. C ��[�\ � C �� �� *Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� � s�#*Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c� sW*Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.�� s�9*Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� � s�!*Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �s�I*Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t��g)Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. 1 +�&_ � 1 � �&s�!+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �%s�I+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.�C�$��*Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�#�g*Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �"��*Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�!�� *Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � gs� � � �,��+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�+�� +Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��*�� +Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �)s�#+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�(sW+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��'s�9+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug. ��R�< � ��3s�9,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �2s�!,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �1s�I,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�0su,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�/�Y,Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.�C�.��+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�-�g+Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters. e �r+��V��: � � e D�8 � 49c502046e8fd1833a810286c8db37a87f18dc47667827f45a56267aefdac60fD�7 � 973cf0ccc163c9374db09502b1e69f3323abc0960eca2ad66bfae874ac23d131D�6 � 4800c473b78c5271f956b53fa3f8a3f696c8b2709fa3afd5457178a5946300ebD�5 � 3c12cdb5717ff04a0dcf949d40ddef5d878342fe63c8cf26ece6f2f0f56c9075D�4 � 1594da41bb4b69a611ac9e605dec625b69dd2f867a53943a544a8babfb76594cD�3 � 0cfe90113fcfe21d6f21f6022481283b9b35ca916c02484fc39e89b88fcffa8aD�2 � 43561875a5de2607f06bea160d4eb38c49eb95d2de1193d32c75d69bbef928deD�1 � a3db401db86968bf26b166686f43ca87a750990d0b9e46fad7c8f63e89052035D�0 � a12a8a2185579f6577042b3b9876e89a3c3c99ff67c168c0388c79d64d4d9854D�/ � 40ebdc19d1f43fa0892059019bcdba4bd97351c6d146ef74e530e00dc4732c4cD�. � 85c0d75554f340d99942609a8488c0ad5b2e4ddc0e40c1192056ab8ab8395492D�- � 1cb65029ad75fd77a7975a1a11ecf00d33c40ae006a565c6b49188cb7f9eb6ccD�, � c5ef38f748c2f2a1c21e14d6274fec8b3391722d8c6c93cdd5f977075f798d88 9 � �� � 9 r�:su-Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.m�9�Y-Marian Csontos <mcsontos@redhat.com> - 7:2.02.186-7.el7_8.1^j$@- Fix failing pvs with locking_type 4.� �8��,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�7�� ,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��6�� ,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �5s�#,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�4sW,Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. � _�9�E � ��@�� -Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �?s�#-Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�>sW-Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��=s�9-Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �<s�!-Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �;s�I-Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. a +�(� � a ��Fs�9.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Es�!.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ds�I.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.r�Csu.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.� �B��-Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�A�� -Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. 2 � �� � 2 r�Msu/Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-1^y�@- Bug fix release. - See WHATS_NEW file for details.t�L�g.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �K��.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�J�� .Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��I�� .Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Hs�#.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�GsW.Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. � _�9�E � ��S�� /Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �Rs�#/Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�QsW/Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��Ps�9/Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Os�!/Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ns�I/Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script. _ +�&� � _ ��Ys�90Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �Xs�!0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �Ws�I0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.t�V�g/Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �U��/Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�T�� /Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools. � � �� � t�_�g0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �^��0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�]�� 0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��\�� 0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize.� �[s�#0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�ZsW0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2. ~ 9� r ~ � �es�#1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6^��- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.c�dsW1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-5^��- Update boom to bug fix release 1.2.��cs�91Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-4^��- boom: Fix traceback in error path. - boom: Improve error path handling with --debug.� �bs�!1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-3^��@- Add allow_mixed_block_sizes into lvm.conf. - Update boom to version 1.1.� �as�I1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-2^�H�- No validation for thin pools not used by lvm, - Add support for VDO in blkdeactivate script.�C�`��0Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG. � u�� � �C�j��1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.5`J@- Fix fsadm failure due to accessing unbound variable. - Fix segfault in vgextend when a PV is missing in the processed VG.t�i�g1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.4`!'�- Fix fsadm behavior with missing parameters.� �h��1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.3_���- Fix lvresize handling of fsck exit code 1 - FS errors corrected.�Q�g�� 1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.2_��@- Fix dmeventd crash with modified reserved_stack configuration option. - Fix lvm crashing when .cache file is changed by external tools.��f�� 1Marian Csontos <mcsontos@redhat.com> - 7:2.02.187-6.el7_9.1_��- Fix conversion to mirrored mirror log with larger regionsize. � �C � � �mq�'2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��lq�A2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� �kq�K2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 M M �/�nq�o2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�qq�q2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�pq�}2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�oq�s2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 $ ,@�$ ��uq�A3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}�tq� 2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�sq�a2Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�rq�12Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �vq�'3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�wq�o3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�zq�q3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�yq�}3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�xq�s3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 & ,@�& ��~q�=3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�}q� 3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�|q�a3Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�{q�13Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �q�'4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/� q�o4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�q4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�q�s4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��q�4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��q�=4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�q� 4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�q�a4Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�14Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � �C � � � q�'5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556�� q�A5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� � q�K5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 M M �/� q�o5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�q5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q� q�s5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@� � � �q�K6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651}�q� 5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�q�a5Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�15Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � d� � �q�'6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��q�A6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 M M �/�q�o6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�q6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�q�s6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 $ ,@�$ �� q�A7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}� q� 6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�q�a6Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�16Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � � q�'7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/� q�o7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�"q�q7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�!q�}7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q� q�s7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��'q�A8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651��&q�=7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�%q� 7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�$q�a7Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�#q�17Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �(q�'8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�)q�o8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�,q�q8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�+q�}8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�*q�s8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 & ,@�& ��0q�=8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�/q� 8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�.q�a8Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�-q�18Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 e �r+��V��: � � e D�E � 33fa2846ccf25385f17ff97c1999aeae26f83868dcd26164e5524c4255cb1ce1D�D � 31cb8b4500b30fc437c8e439643e9d1afd49b8c687a8be5c9b39c44c31f51d44D�C � fce2a6c0ec49c42d5100944108bbb85b8a3e2685de9b583b1b4627e6f66b330eD�B � 3d901cc9a4697e9c08105de93d1a190650a8439e1dabe11a97d17c67cd1d951cD�A � 09d536dbeed2bb97193afabb9564cc6e6def3636f719ed0e3bbb8c0e575f7033D�@ � c1769c3e3380140052696701ca6809cb191ea6c245caf1c658a1b8bc580f13baD�? � 393b6f38ca21b31f198eb40d2fbdecb79a43ca0306ac436c4ebcc4fc8a15043aD�> � 61772a9e48d677eb7feb9225da4fdbfa417f99764a26adf0ba4e311baad2696cD�= � ec4cb2d5a569d854ac525bd458045223e598500765770d860e5bf0b84a41767bD�< � fe463cbf93e98cd763c89bf55103a9c84e8d48e998eb06542fe3e3fb72a10dd9D�; � 34ff7de8a4ca78de046e416a969184543fb961e44c8500ad933f5d0d9d71bdb4D�: � 1333d18f0d5f36acf0badba03a7250ddf92df7f789f4674ece2dfcfcd925f3b3D�9 � 8bf0a6fa452bb777d2800beaf0ba2e84f3dd1b17964e1b1bb26b099bcd5ba413 q q � �1q�'9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�2q�o9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�5q�q9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�4q�}9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�3q�s9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��:q�9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��9q�=9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�8q� 9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�7q�a9Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�6q�19Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �;q�':Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�<q�o:Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�?q�q:Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�>q�}:Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�=q�s:Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��Dq�:Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��Cq�=:Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�Bq� :Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�Aq�a:Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�@q�1:Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � �C � � �Gq�';Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��Fq�A;Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� �Eq�K;Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 M M �/�Hq�o;Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�Kq�q;Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�Jq�};Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�Iq�s;Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 of ~flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �F �M �S �Y �_ �e �j �m �n �q �u �v �w �z �~ � � � � � � � !� "� #� $� %� &� '� (�" )�' *�( +�) ,�, -�0 /�1 0�2 1�5 2�: 3�; 4�< 5�? 6�D 7�G 8�H 9�K ;�O <�Q =�R >�U ?�Y @�Z A�[ B�^ C�c D�d E�e F�h G�l H�m I�n J�q K�v L�w M�x N�{ O� P� Q� R� S� T� U� V� W� X� Y� Z� [� \�& ]�. ^�6 `�> a�F b�N c�V d�^ e�f f�o g�y h� i� j� k� l� m�& n�- o�4 q�< r�B s�H t�N u�V v�] w�c x�j y�q z�w {�{ |�~ }� � ,@� � � �Oq�K<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651}�Nq� ;Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�Mq�a;Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�Lq�1;Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � d� � �Qq�'<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��Pq�A<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 M M �/�Rq�o<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�Uq�q<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�Tq�}<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�Sq�s<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 $ ,@�$ ��Yq�A=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}�Xq� <Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�Wq�a<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�Vq�1<Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �Zq�'=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�[q�o=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�^q�q=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�]q�}=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�\q�s=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��cq�A>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651��bq�==Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�aq� =Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�`q�a=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�_q�1=Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �dq�'>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�eq�o>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�hq�q>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�gq�}>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�fq�s>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 & ,@�& ��lq�=>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�kq� >Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�jq�a>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�iq�1>Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �mq�'?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�nq�o?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�qq�q?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�pq�}?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�oq�s?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � ��vq�?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��uq�=?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�tq� ?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�sq�a?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�rq�1?Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �wq�'@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�xq�o@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�{q�q@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�zq�}@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�yq�s@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � �� q�@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905��q�=@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�~q� @Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�}q�a@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�|q�1@Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � �C � � �q�'ABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��q�AABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� �q�KABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 M M �/�q�oABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�qABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}ABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�q�sABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 $ ,@�$ �� q�ABBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}� q� ABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h� q�aABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�1ABenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � � q�'BBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/� q�oBBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�qBBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}BBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�q�sBBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 & ,@�& ��q�=BBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}�q� BBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�q�aBBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�1BBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 q q � �q�'CBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 M M �/�q�oCBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � Q � �0�q�qCBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�q�}CBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�q�sCBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � ,@�& � �� q�CBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905�� q�=CBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}� q� CBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h�q�aCBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P�q�1CBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 " )�S�i � � " [�&iQDMarian Csontos <mcsontos@redhat.com> - 0.8.5-3^���- Check input file exists earlier.y�%i� DMarian Csontos <mcsontos@redhat.com> - 0.8.5-2]��@- Remove obsolete pool-inactive option from thin_trim man page.j�$ioDMarian Csontos <mcsontos@redhat.com> - 0.8.5-1\�F@- Additional fixes for thin_dump and thin_repair.j�#ioDMarian Csontos <mcsontos@redhat.com> - 0.8.2-1\��@- Fix tools requiring additional --repair option.z�"i� DMarian Csontos <mcsontos@redhat.com> - 0.8.1-1\�~�- Update to latest upstream release including various bug fixes.n�!iwDMarian Csontos <mcsontos@redhat.com> - 0.7.3-3Z �- Fix version 2 metadata corruption in cache_restore.b� i_DMarian Csontos <mcsontos@redhat.com> - 0.7.3-2Yܶ@- Rebuilding with updated source tarball.�S� i�?DMarian Csontos <mcsontos@redhat.com> - 0.7.3-1Y�p@- Update to latest bugfix and documentation update release. - *_restore tools wipe superblock as a last resort. - Add thin_check --override-mapping-root. ) v�� � ) � �.k�EPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�-koEPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�,k� EPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�+k�EPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �*k�EPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��)k�EPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up eventsX�(y;DMarian Csontos <mcsontos@redhat.com> - 0.8.5-3.el7_9.2_h��- Rebuild for Z stream.��'y�DMarian Csontos <mcsontos@redhat.com> - 0.8.5-3.el7_9.1_a�@- Underpopulated nodes are considered non fatal error by thin_check. w �-�w�m � w {�6k� FPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�5k�FPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �4k�FPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��3k�FPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�2}?ECentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�1o=EPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�0k=EPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�/k� EPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode e �r+��V��: � � e D�R � 912ce11b5c1438a25af1e1961d891e6421717a57685de5add6d528d3ff3bdf42D�Q � 1e0e7cf67ede91280fd5a1d1a63490ea597c590a44d12ba3e9d2c08a05b703c1D�P � a9ba907298e679306020035cb1d25f9afc4e33153f8395fbcfb0ce1578791a93D�O � bbf2b7054c85cc8831c0ffba64a4cabdc3eb23c4d32ba5484b962d4c8f22ecdeD�N � 7b812c97766f36c2e477c31f7c5cfaabf34e7bfaf746d34a7f6971d6abc3e95cD�M � 3b822a517d29541cd78da3a94ca8b9ce8095283d799bf7d7ebe96461744ae90dD�L � eac7d9685870a65836a4ca60f270d56cb0278fbdcef6be718d7aae558eeab78dD�K � 4bfbeb71cf3639c4f6067ddf6c491f06976bc93d091646bb825481dd641a719fD�J � 7f4ef7b8732bcac3d9fd39fa13b53c8401e618cc64cf7e86b46a6a0bf9f5ae93D�I � 30c56f4f794204c049aed74f749c3b0b0739f232b66c48497f125252af988405D�H � b1b8c61d7f414e0bff5b987279a268865b3400e4618cc614c0e2852dd52aef50D�G � 33747e3cee335e0df270058b70d2ce33f91cadb372c26e1a24641083294b45b2D�F � 2d5e71a837c196e47d9d4ea6dfd48be8ec78faaf662f54465992a8340399b0cc { ��;�� � { � �>k�GPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��=k�GPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�<}?FCentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�;o=FPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�:k=FPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�9k� FPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �8k�FPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�7koFPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode � � ��E � � \�F}?GCentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�Eo=GPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�Dk=GPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�Ck� GPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �Bk�GPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�AkoGPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�@k� GPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�?k�GPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib ; z�~ � � ; R�Nk=HPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�Mk� HPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �Lk�HPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�KkoHPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�Jk� HPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�Ik�HPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �Hk�HPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��Gk�HPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events X �J�@�J � X � �Vk�IPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�UkoIPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�Tk� IPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�Sk�IPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �Rk�IPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��Qk�IPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�P}?HCentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�Oo=HPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217 w �-�w�m � w {�^k� JPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�]k�JPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib� �\k�JPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��[k�JPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�Z}?ICentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�Yo=IPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�Xk=IPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�Wk� IPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode { ��;�� � { � �fk�KPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-76\��- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase��ek�KPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-75\}@- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events\�d}?JCentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�co=JPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�bk=JPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�ak� JPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �`k�JPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�_koJPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode / � ��E � � / ]�oUiLTim Waugh <twaugh@redhat.com> 3.2-10PY��- Fixed license as current source says GPLv3+.\�n}?KCentOS Sources <bugs@centos.org> - 4.2.5-83.el7.centos.1`��@- Roll in CentOS BrandingT�mo=KPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83.1`���- Fix for CVE-2021-25217R�lk=KPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-83^AE�- Revert fix for 1668696{�kk� KPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-81^(9@- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode� �jk�KPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-80^ P@- Resolves: #1697637 - Resize ldap buffers to truncate bigger objectsk�ikoKPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-79]�?�- Resolves: #1756850 - Close FD in noreplay mode{�hk� KPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-78]S��- Detect time shifts to prevent ip address expiration (#1093803)u�gk�KPavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-77\��@- Resolves: #1712414 - Reset signal handlers set by isclib C ��Y��Q � � C ]�yUiMTim Waugh <twaugh@redhat.com> 3.2-10PY��- Fixed license as current source says GPLv3+.M�xQMLThan Ngo <than@redhat.com> - 3.3-6c��@- Resolves: #2152980, regression[�wQiLThan Ngo <than@redhat.com> - 3.3-5[�H�- Resolves: #1611281, diff -y produces garbageJ�vY?LDaniel Mach <dmach@redhat.com> - 3.3-4R�U�- Mass rebuild 2014-01-24J�uY?LDaniel Mach <dmach@redhat.com> - 3.3-3R�k�- Mass rebuild 2013-12-27k�tS�LTim Waugh <twaugh@redhat.com> 3.3-2Rg�@- Fixed multibyte handling logic for diff -Z (bug #1022417).B�sS5LTim Waugh <twaugh@redhat.com> 3.3-1QQ��- 3.3 (bug #927560).`�rUoLTim Waugh <twaugh@redhat.com> 3.2-13Q']�- Fixed i18n handling of 'diff -E' (bug #914666).��q��LFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2-12Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildc�pUuLTim Waugh <twaugh@redhat.com> 3.2-11P�{@- Ported i18n patch and reinstated it (bug #870460). 3 ��Y��Q � � 3 m�Y�NPetr Oros <poros@redhat.com> - 1:3.0-2Ws�@- Unmask LRDIMM in memmory type detail - Resolves: #1321342M�QMMThan Ngo <than@redhat.com> - 3.3-6c��@- Resolves: #2152980, regression[�QiMThan Ngo <than@redhat.com> - 3.3-5[�H�- Resolves: #1611281, diff -y produces garbageJ� Y?MDaniel Mach <dmach@redhat.com> - 3.3-4R�U�- Mass rebuild 2014-01-24J�Y?MDaniel Mach <dmach@redhat.com> - 3.3-3R�k�- Mass rebuild 2013-12-27k�~S�MTim Waugh <twaugh@redhat.com> 3.3-2Rg�@- Fixed multibyte handling logic for diff -Z (bug #1022417).B�}S5MTim Waugh <twaugh@redhat.com> 3.3-1QQ��- 3.3 (bug #927560).`�|UoMTim Waugh <twaugh@redhat.com> 3.2-13Q']�- Fixed i18n handling of 'diff -E' (bug #914666).��{��MFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2-12Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildc�zUuMTim Waugh <twaugh@redhat.com> 3.2-11P�{@- Ported i18n patch and reinstated it (bug #870460). � �;�`�d � �<� c�NLianbo Jiang <lijiang@redhat.com> - 1:3.2-4^r @- Fix System Slot Information for PCIe SSD - Resolves: rhbz#1793900 - Sync with upstream(commit:62bce59fed1) - Resolves: rhbz#1767323�� c�;NLianbo Jiang <lijiang@redhat.com> - 1:3.2-3\��- Add "Logical non-volatile device" to the memory device types - Resolves: rhbz#1664921g�coNLianbo Jiang <lijiang@redhat.com> - 1:3.2-1[�@- Sync with upstream 3.2 - Resolves: rhbz#1628992c�cgNLianbo Jiang <lijiang@redhat.com> - 1:3.1-1Z�@- Sync with upstream - Resolves: rhbz#1568227r�Y� NPetr Oros <poros@redhat.com> - 1:3.0-5Y �@- Update compiler flags for hardened builds - Resolves: #1420763Z�Y_NPetr Oros <poros@redhat.com> - 1:3.0-4X�f@- Sync with upstream - Resolves: #1385884e�YuNPetr Oros <poros@redhat.com> - 1:3.0-3X!�@- Hide irrelevant fixup message - Resolves: #1384195 * e�]� � � * h�gmOPetr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�ggOPetr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�g�OPetr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)o�g{OPetr Menšík <pemensik@redhat.com> - 2.76-10] ��- Fix TCP queries after interface recreation (#1721668)i�eqOPetr Menšík <pemensik@redhat.com> - 2.79-9\�@- Fix passing of dnssec enabled queries (#1638703)t� e�OPetr Menšík <pemensik@redhat.com> - 2.76-8\��@- Stop using privileged port for outbound queries (#1614331)� � g�5NLianbo Jiang <lijiang@redhat.com> - 1:3.2-5.1_��@- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots - Resolves: rhbz#1858345�� c�MNLianbo Jiang <lijiang@redhat.com> - 1:3.2-5^��@- Revert this patch("Use larger units for memory device and BIOS size") - Resolves: rhbz#1767323 � � �q � o�g{PPetr Menšík <pemensik@redhat.com> - 2.76-10] ��- Fix TCP queries after interface recreation (#1721668)i�eqPPetr Menšík <pemensik@redhat.com> - 2.79-9\�@- Fix passing of dnssec enabled queries (#1638703)�!�k�YOPetr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg�gkOPetr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��g�'OPetr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s�g�OPetr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080) ~�5�A �!� k�YPPetr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg� gkPPetr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)�� g�'PPetr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s� g�PPetr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�gmPPetr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�ggPPetr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�g�PPetr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569) � ���+�+ � g�&gkQPetr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��%g�'QPetr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s�$g�QPetr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�#gmQPetr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�"ggQPetr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�!g�QPetr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)}� k�PPetr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649) �[�p � � o�-g{RPetr Menšík <pemensik@redhat.com> - 2.76-10] ��- Fix TCP queries after interface recreation (#1721668)i�,eqRPetr Menšík <pemensik@redhat.com> - 2.79-9\�@- Fix passing of dnssec enabled queries (#1638703)t�+e�RPetr Menšík <pemensik@redhat.com> - 2.76-8\��@- Stop using privileged port for outbound queries (#1614331)n�*kuQPetr Menšík <pemensik@redhat.com> - 2.76-17.3`B @- Accept replies from bound sockets again (#1923913)w�)k�QPetr Menšík <pemensik@redhat.com> - 2.76-17.2`<�@- Correct two regressions introduced by CVE fixes (#1923913)}�(k�QPetr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)�!�'k�YQPetr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementation ~�5�A �!�4k�YRPetr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg�3gkRPetr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��2g�'RPetr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s�1g�RPetr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�0gmRPetr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�/ggRPetr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�.g�RPetr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569) e �r+��V��: � � e D�_ � 91fc50b78a1f5d50c4f2a592996c690be37c4d7e9724a2dbd625eba57e9d607bD�^ � 2847971791401757255fc2092497c37efa1f8f7440c3ce7fc60b243b497e8094D�] � 69714123fc4f27b58c1e15a2bdfef799961c0c2c3f1398116a458d05cf87f618D�\ � 2d55f68e1a5fb1da8eb138aca00951f0f028a8f3db6a4427488b57f1c043891eD�[ � 67dc839e667e3f5b861596b011039393d6a243f7dfb880c5c787ed72ab1e601fD�Z � 72415fc89f5dcb558370bd92e670638fc9add9ad19ba4ee77ef546520c9a9e39D�Y � f2136014ff193c8527ea2351651b413e5c8cb5eeb1687c98dd2e6d544c6813bdD�X � 81d6abea697da32a4834b6bbe7be764845468cc2ee8e089861fd0eb80c2466c6D�W � a547520b96904888041cdae1529c93057c845c1215a8ac1a453c516eae9263a6D�V � decf2a313c4d562a043eed4b9202d10b5c58750490b4d6db6e70c5a2bf2fe794D�U � 419a628252f2a83438fabbadf25cbc862ef23160a9a3d32fa110f61a1f1f3930D�T � 3989ac4ab63df7b51e1ce010e2b0d2368a33f915f06ae6b659dd6861d3dc3721D�S � 49a6803a256d5206d45f93d9583e7333cd4961a731881b7a82c761bb7ea7c9ab c �"�8�W � c g�<gkSPetr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��;g�'SPetr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610)s�:g�SPetr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�9gmSPetr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�8ggSPetr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�7g�SPetr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)o�6g{SPetr Menšík <pemensik@redhat.com> - 2.76-10] ��- Fix TCP queries after interface recreation (#1721668)i�5eqSPetr Menšík <pemensik@redhat.com> - 2.79-9\�@- Fix passing of dnssec enabled queries (#1638703) � �[�q � s�Bg�TPetr Menšík <pemensik@redhat.com> - 2.76-14^�@- Stop treating SERVFAIL as successful response (#1815080)h�AgmTPetr Menšík <pemensik@redhat.com> - 2.76-13^^F�- Do not ignore DHCPv6 relay messages (#1757247)e�@ggTPetr Menšík <pemensik@redhat.com> - 2.76-12^\�@- Fix memory leak in create_helper (#1795369)�?g�TPetr Menšík <pemensik@redhat.com> - 2.76-11]��@- Send dhcp_release even for addresses not on local network (#1752569)}�>k�SPetr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)�!�=k�YSPetr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementation | v �g � | n�HkuTPetr Menšík <pemensik@redhat.com> - 2.76-17.3`B @- Accept replies from bound sockets again (#1923913)w�Gk�TPetr Menšík <pemensik@redhat.com> - 2.76-17.2`<�@- Correct two regressions introduced by CVE fixes (#1923913)}�Fk�TPetr Menšík <pemensik@redhat.com> - 2.76-17.1`% @- Fix occasional failures in netlink on many interfaces (#1887649)�!�Ek�YTPetr Menšík <pemensik@redhat.com> - 2.76-16.1_��@- Accept responses only on correct sockets (CVE-2020-25684) - Use strong verification on queries (CVE-2020-25685) - Handle multiple identical DNS queries better (CVE-2020-25686) - Link against nettle for sha256 hash implementationg�DgkTPetr Menšík <pemensik@redhat.com> - 2.76-16^��@- Fix strict-mode retries on REFUSED (#1755610)��Cg�'TPetr Menšík <pemensik@redhat.com> - 2.76-15^��@- Forward non-recursive queries to upstream, but serve local names (#1755610) � ��o�u � � �N�'�UFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.12-0.33.pre5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildo�MmuUKamil Dudka <kdudka@redhat.com> - 0.12-0.32.pre5P��@- do not delegate GSSAPI credentials (CVE-2012-4545)��Lm� UKamil Dudka <kdudka@redhat.com> - 0.12-0.31.pre5Pr�@- add default "ddg" dumb/smart rewrite prefixes for DuckDuckGo (#856348)v�Km�UKamil Dudka <kdudka@redhat.com> - 0.12-0.30.pre5P<��- fix specfile issues reported by the fedora-review script� �J�'�UFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.12-0.29.pre5P�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildt�ImUKamil Dudka <kdudka@redhat.com> - 0.12-0.28.pre5OY�- do not crash if add_heartbeat() returned NULL (#798103) ;��$� � i�VeqVPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��Ue�;VPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033��Te�=VPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�Se�VPetr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033h�RmgUKamil Dudka <kdudka@redhat.com> - 0.12-0.37.pre6Y��- Rebuilt for js 48-bit VA support (#1439479)S�Qk?UDaniel Mach <dmach@redhat.com> - 0.12-0.36.pre6R�U�- Mass rebuild 2014-01-24S�Pk?UDaniel Mach <dmach@redhat.com> - 0.12-0.35.pre6R�k�- Mass rebuild 2013-12-27�A�Om�UKamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6Q+R@- update to latest upstream pre-release - drop unneeded patches - fix autoconf warnings - explicitly disable using OpenSSL and GnuTLS H { �; � H s�]e�WPetr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033z�\k� VJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�[ccVTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�Zk�VJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�Yk�iVJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�XkqVJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��Wk�VJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518) � l�m�y � �i�ck�iWJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�bkqWJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��ak�WJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�`eqWPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��_e�;WPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033��^e�=WPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033 � � �)� � i�jeqXPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��ie�;XPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033��he�=XPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�ge�XPetr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033z�fk� WJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�eccWTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�dk�WJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643) H { �; � H s�qe�YPetr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033z�pk� XJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�occXTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�nk�XJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�mk�iXJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�lkqXJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��kk�XJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518) � l�m�y � �i�wk�iYJan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�vkqYJan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��uk�YJan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�teqYPetr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��se�;YPetr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033��re�=YPetr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033 � � �� �[�{q�GZSebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081z�zk� YJacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�yccYTomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�xk�YJan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643) � G; � � �~i�QZPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��}i�)ZPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�|q�{ZSebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�k� ZVít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=ZOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�oZOndrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387�� i�)ZPavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/ZSebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 {� � � �i�Q[Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)[Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{[Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.��{� ZOndřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 -!l � �:� k� [Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008�� u�=[Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o[Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387�� i�)[Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/[Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�q�{\Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�q�G\Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��s� [Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365�� {� [Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��i�)\Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/\Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �i�Q\Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)\Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��{� \Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�k� \Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=\Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o\Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �i�Q]Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)]Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{]Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:� k� ]Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008�� u�=]Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o]Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387�� i�)]Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O� q�/]Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 b {�z�S � b ��'k�^Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�&eq^Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��%e�;^Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033��$e�=^Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�#e�^Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033��"s� ]Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��!{� ]Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 9 ��$�C � 9 ��.e�=_Petr Hracek <phracek@redhat.com> - 1:24.3-16U���- emacs on ppc64le fails to build from source when RELRO is enabled - Resolves: #1223033s�-e�_Petr Hracek <phracek@redhat.com> - 1:24.3-15U�@- Updated texts in patch and SPEC file - Resolves: #1223033z�,k� ^Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177)a�+cc^Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�*k�^Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�)k�i^Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�(kq^Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451) < m| � < a�5cc_Tomas Pelka <tpelka@redhat.com> - 1:24.3-23]� @- Resolves: #1765208 rebuild against new IM}�4k�_Jan Synáček <jsynacek@redhat.com> - 1:24.3-22[��@- refix: TLS certificate warnings should be hard errors (#1403643)�i�3k�i_Jan Synáček <jsynacek@redhat.com> - 1:24.3-21[ @- fix libjpeg detection fails with gcc7 (#1487557) - fix Emacs GUI Toolbar icons missing (#1477745) - fix hardening: TLS certificate warnings should be hard errors (#1403643)l�2kq_Jan Synáček <jsynacek@redhat.com> - 1:24.3-20Y��@- fix unsafe enriched mode translations (#1490451)��1k�_Jan Synáček <jsynacek@redhat.com> - 1:24.3-19Xo��- fix build failure on ppc64 (#1336711) - fix emacs crashes (#1308518)i�0eq_Petr Hracek <phracek@redhat.com> - 1:24.3-18V A- Fix for sbit on emacs binary - Related: #1223033��/e�;_Petr Hracek <phracek@redhat.com> - 1:24.3-17V @- emacs on ppc64le fails to build from source when RELRO is enabled - Related: #1223033 � ��Q�H � }�<]� `Milan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�;]1`Milan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�:]� `Milan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��9]�1`Milan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�8]� `Milan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�7]�`Milan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495z�6k� _Jacek Migacz <jmigacz@redhat.com> - 1:24.3-23.1d0�- Fix htmlfontify.el command injection vulnerability (#2175177) e �r+��V��: � � e D�l � a52fbf59e2e7f8b7b912ee6fd5be7c84450b3ab1d4cb68690cfc3f306086b817D�k � a919c9e3a766f98e15edfc8dde8b699f46753980aaf8f4b46d2831fcc01cf9b7D�j � 369ac51f105f8b0b9fb343deb57c8ed97f3e08bbb535d683866ddfd47b058675D�i � 1b57cc987d64b98efbaa6f796a3df838d4f4cc4a2b892e4e19685ea37ea8188dD�h � 284e903527e4376ba342697bff7afdcf76804823b3344908e0ad3589efb08d0eD�g � a56dd9d75f85b76dd72f232aef6262710e4f66d7291c55f0e3467fa4c70855eeD�f � 006866668980a661dabcff054750dcfabee9be838cbdbe8f6554a12c8d2437e4D�e � 1d2c5ccf5a54793d996b971ad4448b1d95a72bf1270703b1cdd944b0b4a82932D�d � 98fa7e7c32572003a415282278a680123f7896108aa35e2ddad608cf9a8bf1b6D�c � d057cb97f19e0b7a6e8769b9407b59d09edac0f8548ba4137a65575461013ea6D�b � 7174a32cc247b70e650aa36730fa976b5d7e498a9fc59fde5c06de3be20d8da3D�a � e9ee7e077912afbee46d9de1440f905a3150a783ca98d2999145e7f0d4946b00D�` � cdc630a6947d25b54a576be1d51170f8ca7a920b446adaa54aece61b239e798d ^ | �g � ^ ��C]�1aMilan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�B]� aMilan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�A]�aMilan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�@a� `Milan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�?]`Milan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�>]�`Milan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �=]�%`Milan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail) �9�5�J � �/�K]�bMilan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�Ja� aMilan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�I]aMilan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�H]�aMilan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �G]�%aMilan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�F]� aMilan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�E]1aMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�D]� aMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream) A ��x0�, � A l�S]bMilan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�R]�bMilan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �Q]�%bMilan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�P]� bMilan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�O]1bMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�N]� bMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��M]�1bMilan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�L]� bMilan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream) � ��W�N � }�Z]� cMilan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�Y]1cMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�X]� cMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��W]�1cMilan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�V]� cMilan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�U]�cMilan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�Ta� bMilan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change) ^ | �g � ^ ��a]�1dMilan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�`]� dMilan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�_]�dMilan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�^a� cMilan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�]]cMilan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�\]�cMilan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �[]�%cMilan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail) �9�5�J � �/�i]�eMilan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�ha� dMilan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�g]dMilan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�f]�dMilan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �e]�%dMilan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�d]� dMilan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�c]1dMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�b]� dMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream) A ��x0�, � A l�q]eMilan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�p]�eMilan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �o]�%eMilan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�n]� eMilan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�m]1eMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�l]� eMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��k]�1eMilan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�j]� eMilan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream) � ��W�N � }�x]� fMilan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�w]1fMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�v]� fMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)��u]�1fMilan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�t]� fMilan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�s]�fMilan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�ra� eMilan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change) ^ | �g � ^ ��]�1gMilan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�~]� gMilan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream)�/�}]�gMilan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�|a� fMilan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�{]fMilan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�z]�fMilan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �y]�%fMilan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail) �9�5�J � �/�]�hMilan Crha <mcrha@redhat.com> - 3.28.2-1[�@- Update to 3.28.2 - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code) - Resolves: #1575495t�a� gMilan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change)l�]gMilan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�]�gMilan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� �]�%gMilan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}�]� gMilan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E�]1gMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|� ]� gMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream) A ��x0�, � A l�]hMilan Crha <mcrha@redhat.com> - 3.28.5-5^��@- Resolves: #1772103 (EDBusServer: Delay new module load)y�]�hMilan Crha <mcrha@redhat.com> - 3.28.5-4]S��- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)� � ]�%hMilan Crha <mcrha@redhat.com> - 3.28.5-3\�@- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)}� ]� hMilan Crha <mcrha@redhat.com> - 3.28.5-2\T4�- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)E� ]1hMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|� ]� hMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796174 (fixed upstream)�� ]�1hMilan Crha <mcrha@redhat.com> - 3.28.3-2[(�@- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)|�]� hMilan Crha <mcrha@redhat.com> - 3.28.3-1['��- Update to 3.28.3 - Remove patch for GNOME bug #795997 (fixed upstream) @ ��y1� @ �X�]�UiMilan Crha <mcrha@redhat.com> - 3.28.5-4]��@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels) - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)��]�5iMilan Crha <mcrha@redhat.com> - 3.28.5-3]S��- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)��]�/iMilan Crha <mcrha@redhat.com> - 3.28.5-2[�v�- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)E�]1iMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�]� iMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796297 (fixed upstream)� �]�?iMilan Crha <mcrha@redhat.com> - 3.28.3-2[0�@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)t�a� hMilan Crha <mcrha@redhat.com> - 3.28.5-5.1bs�@- Resolves: #2081786 (Backport patch for Google OAuth2 change) � f�[�I � � E� ]1jMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|� ]� jMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796297 (fixed upstream)� �]�?jMilan Crha <mcrha@redhat.com> - 3.28.3-2[0�@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)~�]�!iMilan Crha <mcrha@redhat.com> - 3.28.5-8_� �- Resolves: #1891558 (Birthday date of Contact depends on system timezone)}�]� iMilan Crha <mcrha@redhat.com> - 3.28.5-7_��- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)��]�3iMilan Crha <mcrha@redhat.com> - 3.28.5-6^�U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)��]�QiMilan Crha <mcrha@redhat.com> - 3.28.5-5]�)�- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer) j w�u � j }�#]� jMilan Crha <mcrha@redhat.com> - 3.28.5-7_��- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)��"]�3jMilan Crha <mcrha@redhat.com> - 3.28.5-6^�U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)��!]�QjMilan Crha <mcrha@redhat.com> - 3.28.5-5]�)�- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)�X� ]�UjMilan Crha <mcrha@redhat.com> - 3.28.5-4]��@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels) - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)�� ]�5jMilan Crha <mcrha@redhat.com> - 3.28.5-3]S��- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)�� ]�/jMilan Crha <mcrha@redhat.com> - 3.28.5-2[�v�- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30) 6 �o'� 6 �X�*]�UkMilan Crha <mcrha@redhat.com> - 3.28.5-4]��@- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels) - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)��)]�5kMilan Crha <mcrha@redhat.com> - 3.28.5-3]S��- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)��(]�/kMilan Crha <mcrha@redhat.com> - 3.28.5-2[�v�- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)E�']1kMilan Crha <mcrha@redhat.com> - 3.28.5-1[^��- Update to 3.28.5|�&]� kMilan Crha <mcrha@redhat.com> - 3.28.4-1[L��- Update to 3.28.4 - Remove patch for GNOME bug #796297 (fixed upstream)� �%]�?kMilan Crha <mcrha@redhat.com> - 3.28.3-2[0�@- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)~�$]�!jMilan Crha <mcrha@redhat.com> - 3.28.5-8_� �- Resolves: #1891558 (Birthday date of Contact depends on system timezone) f�[�x# z W�2eMlJosef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%�1e�glJosef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiffR�0eClJosef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources_�/e]lJosef Ridky <jridky@redhat.com> - 0:1.8.18-1X� @- New upstream release 1.8.18 (#1398658)~�.]�!kMilan Crha <mcrha@redhat.com> - 3.28.5-8_� �- Resolves: #1891558 (Birthday date of Contact depends on system timezone)}�-]� kMilan Crha <mcrha@redhat.com> - 3.28.5-7_��- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)��,]�3kMilan Crha <mcrha@redhat.com> - 3.28.5-6^�U@- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)��+]�QkMilan Crha <mcrha@redhat.com> - 3.28.5-5]�)�- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer) � ���'� � � �8k�SlPavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78.i�7sclVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^�6sMlVáclav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o�5e}lJosef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)��4e�=lJosef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o�3e}lJosef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658 e �r+��V��: � � e D�y � 8246ba658ab0a84cdf2b467c142701ec560b9ced3db90dfd04a7275cb2636566D�x � 301d479dffc9084746269cad6d9be379a3c01fafa139c9203aa5c98ca7e9d79eD�w � f4c0956c54c55adea5769904bb460f6ab64b017d31e9a73f0a047345be6dd6afD�v � 6cc655263da0213df7eb5a2c6c63b5825361f55336855a67a7b33881d10ca955D�u � fc2d6ed7481cb42c62b4bd75126fc4237093c74ba7e87908a90815f672bdf45dD�t � b0179562abc1ff5d40c03661749ce4f7f4c7d58c428cecfc4a3711bfa98e6ec6D�s � c653aaa3759f6c65e6ccf1dafa36096bf4821f315dbf756943730947258100efD�r � 54b72bac2daf97a8d1ba79e4288be55712b5b35027f2df547f3e0af93bd9b6a5D�q � 037e885e4b00fa8c73772c5a2e0f05aa735f04807e080c5819a8a15dade3d5dcD�p � 73cda0f598ca90fe3470940ed62663a7a5a1091731757b8e057fc929d3c1a209D�o � 1a5b2d18101ca9a398c7873900403ed4ffc7daf7fb801a9ce1649c3fafe185cfD�n � 4402a7fcf865ee506196d91c722ec2875470f134b63f3912ac69561ba10e5113D�m � 18defd29c31366e3f3fc7602eed4307dcdd1028a8e25fd6823379fa2ef33eb6b g�lo { \�?eWmJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�>a�mJan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410�y�=a�mJan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�<a[mJan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�;[?mDaniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24K�:[?mDaniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��9��mFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild � �\�u' � \�Fa[nJan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�E[?nDaniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24K�D[?nDaniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��C��nFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�Be�amJan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��Ae�GmJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695b�@ecmJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637 � �K � ��Ke�GnJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695b�JecnJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�IeWnJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�Ha�nJan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410�y�Ga�nJan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232 � Z�s%� � �y�Qa�oJan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�Pa[oJan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�O[?oDaniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24K�N[?oDaniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��M��oFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�Le�anJan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352 " �H� p " K�X[?pDaniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��W��pFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�Ve�aoJan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��Ue�GoJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695b�TecoJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�SeWoJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�Ra�oJan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410 � �SVb � b�^ecpJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�]eWpJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�\a�pJan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410�y�[a�pJan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�Za[pJan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�Y[?pDaniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24 0 g�(��- 0 �y�ea�qJan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�da[qJan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�c[?qDaniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24K�b[?qDaniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��a��qFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�`e�apJan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��_e�GpJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695 " �H� p " K�l[?rDaniel Mach <dmach@redhat.com> - 0.23-5R�k�- Mass rebuild 2013-12-27��k��rFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.23-4Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�je�aqJan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��ie�GqJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695b�hecqJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�geWqJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�fa�qJan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410 � �SVb � b�recrJan Grulich <jgrulich@redhat.com> - 0.27.0-2\X)@- Minor improvements Resolves: bz#1652637\�qeWrJan Grulich <jgrulich@redhat.com> - 0.27.0-1\=�@- Exiv2 0.27.0 Resolves: bz#1652637�p�pa�rJan Grulich <jgrulich@redhat.com> - 0.26-3Z�@- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a remote attacker to cause a denial of service via a crafted tif file Resolves: bz#1548410�y�oa�rJan Grulich <jgrulich@redhat.com> - 0.26-2Z���- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp Resolves: bz#1547207 Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp Resolves: bz#1545232\�na[rJan Grulich <jgrulich@redhat.com> - 0.26-1Y�W@- Update to 0.26 Resolves: bz#1420227K�m[?rDaniel Mach <dmach@redhat.com> - 0.23-6R�U�- Mass rebuild 2014-01-24 " g�'��3 � | " W�{]UsJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�z]]sJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�y[UsJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�x]?sDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�w]?sDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�v[OsJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��u��sFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�"�te�arJan Grulich <jgrulich@redhat.com> - 0.27.0-4a �- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS Resolves: bz#1990352��se�GrJan Grulich <jgrulich@redhat.com> - 0.27.0-3^K�- Validate relationship of the total size to the offset to avoid crash Resolves: bz#1775695 � � j�|]{sJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903 Z Z �"�}e�asTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 W >�N � � W V�[UtJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�]?tDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�]?tDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S� [OtJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)����tFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�>�~e�sTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�]{tJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�]UtJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�]]tJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�e�atTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 9 >��J � � 9 W�]UuJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[� ]]uJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V� [UuJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L� ]?uDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L� ]?uDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S� [OuJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�>�e�tTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � � j�]{uJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903 Z Z �"�e�auTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 _ >�V � _ V�[UvJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�]?vDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�]?vDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�[OvJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��e�9uTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�e�uTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� � �� �� �� �� �� ��' ��. ��5 ��< ��C ��K ��S ��Z ��a ��i ��q ��x �� �� �� �� �� ��# ��* ��2 ��8 ��? ��F ��K ��Q ��X ��^ ��e ��l ��r ��{ ��| ��} �� �� �� �� �� �� �� �� �� �� ��$ ��% ��+ ��. ��/ ��6 ��7 ��8 ��> ��A ��B ��H ��L ��M ±S ñV ıW ű^ Ʊ_ DZ` ȱf ɱi ʱj ˱m ̱s ͱx α} ϲ в Ѳ Ҳ Ӳ Բ ղ# ֲ( ײ. ز3 ٲ8 ڲ> ܲC ݲI O ߲T �Y �_ �d �j �p �u �{ � � � � � � �" �' �- �3 �8 �= � �H� j�]{vJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�]UvJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�]]vJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�e�avTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 >� � m L� ]?wDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L� ]?wDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S� [OwJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�� ��wFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�� e�9vTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�e�vTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �I�� j�$]{wJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�#]UwJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�"]]wJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�![UwJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718 Z Z �"�%e�awTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 W >�N � � W V�+[UxJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�*]?xDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�)]?xDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�([OxJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��'��xFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�>�&e�wTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�.]{xJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�-]UxJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�,]]xJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�/e�axTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 9 >��J � � 9 W�6]UyJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�5]]yJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�4[UyJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�3]?yDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�2]?yDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�1[OyJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�>�0e�xTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � � j�7]{yJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903 Z Z �"�8e�ayTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 _ >�V � _ V�>[UzJoe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�=]?zDaniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�<]?zDaniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�;[OzJoe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��:e�9yTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�9e�yTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 e �r+��V��: � � e D� � 997876dc6dace25c6299e9ca1dc76b8112d4862b054ac67c11bcfa1e81c637efD� � 36e226643adb16e51005fd729514451221b0570727d946df70bc555084b1ab43D� � c59613f8305583361be758cf7921fe48cedfaca536f354535c5dca03087c3798D� � c102608096eb8bfc89f563c1a82e55812f85dc764c578fc98b29fe740b014b88D� � bb4a0d5f27950f8712ba44e0d94dac84d24f409c0064a28dd7e64dab38dea9bcD� � ad0cdb4681378d6768d0ba8ff62f05cf6459eb32070c81c7d3eec65c844a8fa5D� � 7202bdb3eb9b58bc979d8ec45159b6e39ea0ff80df19efb9cc6274a852beee11D� � 8552fe474d6c38b9a301d6273b81897005c2a518b97ad149df81dca168a8bdc6D�~ � 77a2ace1d206cdce59078a04e1d50602e60fa9783490a87d7d894bfb57c1904cD�} � 38165265e6956a27cc026b542a5b84342b4e8d479263713e10c9a0b0871d9705D�| � 46c46ba8573d8f101c53fe10179a66e853ec151d66f5dfb686fb60c5e75aa610D�{ � a962654ff0fe134fdd88392c47a711e94bc84e08e27d0a7cb7d28e9150d2999aD�z � 45f0406fbbb55abe1511ceade8ca9fb297ae44cce197166c9a3f70561dbffc30 � �H� j�A]{zJoe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�@]UzJoe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�?]]zJoe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�Be�azTomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 >� � m L�H]?{Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�G]?{Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�F[O{Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��E��{Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild��De�9zTomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�Ce�zTomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �I�� j�L]{{Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�K]U{Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�J]]{Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�I[U{Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718 Z Z �"�Me�a{Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 W >�N � � W V�S[U|Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�R]?|Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�Q]?|Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�P[O|Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��O��|Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-5Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild�>�Ne�{Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�V]{|Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�U]U|Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�T]]|Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�We�a|Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 9 >��J � � 9 W�^]U}Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�]]]}Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718V�\[U}Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�[]?}Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�Z]?}Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�Y[O}Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)�>�Xe�|Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � � j�_]{}Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903 Z Z �"�`e�a}Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 _ >�V � _ V�f[U~Joe Orton <jorton@redhat.com> - 2.1.0-9X6�@- add security fix for CVE-2016-0718L�e]?~Daniel Mach <dmach@redhat.com> - 2.1.0-8R�U�- Mass rebuild 2014-01-24L�d]?~Daniel Mach <dmach@redhat.com> - 2.1.0-7R�k�- Mass rebuild 2013-12-27S�c[O~Joe Orton <jorton@redhat.com> - 2.1.0-6Q��@- fix "xmlwf -h" output (#948534)��be�9}Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�ae�}Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 � �H� j�i]{~Joe Orton <jorton@redhat.com> - 2.1.0-12^��- add security fixes for CVE-2018-20843, CVE-2019-15903W�h]U~Joe Orton <jorton@redhat.com> - 2.1.0-11]9��- add security fix for CVE-2015-2716[�g]]~Joe Orton <jorton@redhat.com> - 2.1.0-10X6�A- updated security fix for CVE-2016-0718 Z Z �"�je�a~Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13b~�- Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 Y >� Y �O�mq�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784��le�9~Tomas Korbar <tkorbar@redhat.com> - 2.1.0-15c:�- Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674�>�ke�~Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14b8h�- Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 : u�#� � : �sq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�rq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��qq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�pq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�oq�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��nq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818 E q4� E �L�xq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��wq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��vu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�uu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �tq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 ~�� � �}q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�|q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�{q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��zq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�yq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205 ^ �/� � ^ �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�~u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 � l�o�c � �Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 ! ~�� � ! {�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 ��� � �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189 9 �/�2 � 9 w� u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 F �"R � F ��#q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�"q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�!q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O� q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784 A #� � A ��(u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�'u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �&q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�%q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�$q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 : u�#� � : �.q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�-q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��,q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�+q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�*q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��)q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818 Q q4�! Q �L�3q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -|�2u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��1u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�0u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �/q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 ~�� � �8q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�7q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�6q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��5q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�4q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205 & �/�2 � & ��>q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�=q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�<u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�;u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��:u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�9u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 e �r+��V��: � � e D� � 805b144f9365a51694ca9ecf28482dd714b37f78fa08e3a4a7a5aa22da4216deD� � 757772969a2b13e5983aef925c31b673696df5c322b359714f2a89267929bf4eD� � 0cd349e9faa4208c5a06dd623c32419cde907327603062ef0197ae238ecf9cb1D� � 815665d02d2dd24faf81af70e9152d3a62a47d616ae070372b69b3ce7b0c1e95D� � dbc118d3ccfcbb7b3059ad8a684e25485e0745d8f682f5b8e2a16c1ab4a3100bD� � 22ad74d75ec657ae1c2e0ef0ec2331caf9bbe77cd9d4af628f4350d8891164d0D� � 42e5dee7b0556011cb8bdc92961b584ecf210268b03c4e68df01ba36dc1f30e1D� � 0c50466e187899042f37e621ad418348afddcf8a0b1ef74a9c42573da5425ecaD� � 2c656f5e90d00ae998a2b2a6a9d7caaa9328030aefb87a1ce161d941af33182eD� � 314a81ff92e3f3500ef8c7b95dd418bbf2ed11ea8d65031d6e8de42e8e43ab73D� � 5ec01f00815a52d61439e813a4a0958fc52c9c59500edb2e2fabac3c7fe068c8D� � e4434d6372a44237428f390b21eaa263d38ebe585fcde7c9b6d093bd6a53f942D� � 55a15d25343aa48f6f67cbbb7365207f4430960b97fe22eea6521df9ef5f6e1e A #� � A ��Cu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Aq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�@q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�?q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Iq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Hq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Gq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Lu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Jq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Tq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Sq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Rq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Qq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Pu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Xq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Vq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�_q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��^q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�]q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�\q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��[q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Zu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��cu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �aq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�`q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �jq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�iq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�hq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��gq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�fq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�eq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��pq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�oq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��lu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��uu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �sq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�rq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�qq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �{q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�zq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��yq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�vu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��~u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�}u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �|q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��"q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�!q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��'u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�&u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �%q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�$q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�#q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �-q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�,q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��+q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�*u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�)u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�(u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�3u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�2u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�1u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��0u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�/u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �.q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �8q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�7q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��6q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�5q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�4u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�=u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �<q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�;q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�:q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��9q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Cq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Bq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Aq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�@q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��?q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��>u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 e �r+��V��: � � e D� � 4bec36ddbf5963ce6aa8fffba7900ae727da0978060620165937170bee608f51D� � e899e4be36103040ff23d743f3f3ec0eaf8bddfc2604aee19b9ab12e587d87e8D� � f4df6c727e6e445ddca7fe286fc32ec9aed6c8a3fddf42faf905580926d1117aD� � e0a4a368252a2466ddc2b35c58646282829e8b14ff12d3237645aab8609ca5c2D� � 5f5c399567e8888b62c997c08412e019f0c5ddf8dd28c78cfa0128928dcd853eD� � 662a9d17ec8e137ca36a020dc0efbe8ae088dfd2e1dab2436cf4496bf31f3c75D� � b6ff39e8375e47ff8d8c06f442a8b78add02677aa81e66db47255f6469357012D� � 293f6c4af159003426f1ce9255f1bc981d24fe6d1e848489c5b960eb8d9b7e85D� � e31ccbd3696503d01bf17eb08d66c852a75d233ea3040b15ee14477f72f2013dD� � 84534b4e8a9f57e1d6cedeafa786721a479e210dc0b2bc07dd005e62c961e69eD� � 575a71de43d9ee448ec1678d6e6396b7c3cc5de05454e3681e5a3f900c5dc4bcD� � 457da3dc935ceedbf369f8d8283038086c61d7ec599b6b13c34f1a9eb692decdD� � f2bf2828a9c0dfda573e370c7710e37259fb9041de3d51ef97b7cd65188789a9 � ~�� � |�Hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Gu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Eq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Nq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Lq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Kq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Iq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Tq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Qu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Pu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Yu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Wq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Vq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Uq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �_q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�^q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��]q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�\u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�[u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Zu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��bu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�au��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �`q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�iq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��hq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�gq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�fu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �nq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�lq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��kq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�uq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��tq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�rq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��qq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��pu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�zu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��yu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �wq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�vq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�~q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��}q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�|q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�{q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A �� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V � q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�!u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�'q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��&q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�%q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�$q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��#q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��"u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�,u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��+u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�*u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �)q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�(q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �2q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�1q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�0q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��/q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�.q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�-q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��8q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�7q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�6u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�5u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��4u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�3u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��=u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�<u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �;q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�:q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�9q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Cq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Bq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Aq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�@u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�?u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�>u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 e �r+��V��: � � e D�- � e03fb473c4111b34ab231b026b46e185aba267a54abad312d1fc4be2fe1a79baD�, � ddf36ad1ce4578114e5a65661c1a8de7696ede0b51d5d3a2d8ac551164a4d7ccD�+ � 4bdf983ae009a8ef897188d860d0535c00a5071923c33261e644570fa2d5cb9dD�* � 7b0c0a663c4992773363ce6c177e9d75ad05e8f8ee19c76a4d1f71fdd6a97da0D�) � a4e1b36b41fc592139af224d55fdf5ffecd2f6b528dd8ae73388911df76a9f02D�( � f646388701bda1badf96a2fb3864cff8cec8c983277a87af8b050a51147a03afD�' � bf7e4ecac92c09b957b31c3b99fe5124cb6807feecce32ee6137fa893ce3daecD�& � 056e7fe3c5a00be53248709c74120df1d6c073ef1b7b7beba63ff41d48f35c17D�% � 0c17cb1415294598f297a58396280f055f0f3258f080b1ab697bfe04bbe0008dD�$ � 4d77c6049313415fe1c4aab3e4ee43727167a46b87e28723f6c79f4bffef3607D�# � e2a3860deceb4f2f2ddc8390def1eb021196fee5ef075702ec1588374818efa6D�" � c7b50fc58609f6e4057703fe1bb83fe6a7c2c9ca068b534e97ac8c7a78e4c8f4D�! � 6bca052cf755c10a9a15dd05c1eba4a527bd36e88354bfc05d9a678661d7d827 $ q4�! � $ |�Iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Gu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Fu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Dq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Nq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Mq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Lq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Kq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Ju}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Su��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Rq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Qq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Pq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Oq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Yq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Xq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Vq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Tu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�^u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��]u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�\u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �[q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Zq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �dq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�cq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�bq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��aq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�`q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�_q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��jq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�iq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�gu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��fu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��ou�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �mq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�lq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�kq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �uq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�tq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��sq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�qu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�pu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�{u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�zu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��xu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �vq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V � q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��~q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�}q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�|u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & �� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��!u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �'q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�&q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��%q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�$u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�#u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�"u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�-u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�,u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�+u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��*u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�)u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �(q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �2q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�1q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��0q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�/q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�.u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�7u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �6q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�5q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�4q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��3q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�=q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��<q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�;q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�:q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��9q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��8u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Au�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�@u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �?q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�>q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 of iflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��H ��N ��T ��Y ��_ ��e ��j ��o ��u ��z �� � � � � � �! �' �, �2 �8 �= �C �I �N �S �Y �^ �d �j �o �u �{ � � � � � � �! �' �- �2 !�7 "�= #�B &�H '�N (�S )�Y *�_ +�d ,�i -�o .�t /�z 0� 1� 2� 3� 4� 5� 6�! 7�& 8�, 9�2 :�7 ;�= <�C =�H ?�M @�S A�X B�^ C�d D�i E�o F�u G�z H� I� J� K� L� M� N�! O�' P�, Q�1 R�7 S�< T�B U�H W�M X�S Y�Y Z�^ [�c \�i ]�n ^�t _�z `� a� b� c� d� e� f� g�& h�, e �r+��V��: � � e D�: � eb7bebdbd517434195d041324099366ce234dfd58929430224320ff59b866c8eD�9 � 864bee28e84214e17a2569dc4782fe389e64424fc470fc80157b86f2bdf0df03D�8 � 2ebe4dd6652fe19a01c6576bd236175a5952205b51f6f3c76a25a539af114ca1D�7 � e818d4e04d72d3014d26343beb92384fad7a4c394dde4f7dc2a541d0416f569fD�6 � 132ce82de39a18ad1be89af9ce56bdf2cf2471eddae86a469dfbdaef42478652D�5 � 55db8fa1e758d5038aa9f74ed8982f1b73505b989a9643ef81f8b704f975fb8cD�4 � 2eb32fa5c1642715eed3bff00d204b72790f716770349e1a3307229ec9f1a88aD�3 � 4badd67c65c46b09cdfb999c67dcf07efbec0e2b1b5ee21318fb415d90aff27eD�2 � 1b7c83c31498a1d9eec34b76e89035fa039c4d34cdfb507851df956c9a5cb86bD�1 � 8901005d391fcf6247d95caeaae9763898d0d5a0e8da308e73380bbdefdbbb1cD�0 � 90b4df9d1f42ba4c9d6ed5a171805bd3aa1ab73ca030c78d62b088ffd716ff81D�/ � 9f8abcf48b89d3171a189ec5449a97b802ba649f300ad32218c8310d9ae89caaD�. � 63037d9ff075fdac3127a74533eb74eaba6a3dd7a6b714768f44507fd8962d88 6 0�$G � 6 � �Hq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Fq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Eq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Cq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Nq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Ju�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Su�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Qq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Pq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Oq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Yq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Xq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Wq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Vu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�_u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�^u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�]u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��\u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�[u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Zq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�cq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��bq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�aq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�`u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �hq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�fq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��eq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�oq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��nq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�lq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��kq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��ju�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��su�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �qq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�pq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �zq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�yq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�xq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��wq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�vq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�uq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & �� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�~u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�}u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��|u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�{u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � � q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�!q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�&u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��%u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�$u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �#q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�"q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �,q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�+q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�*q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��)q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�(q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�'q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��2q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�1q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�0u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�/u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��.u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�-u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��7u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�6u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �5q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�4q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�3q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �=q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�<q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��;q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�:u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�9u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�8u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Au��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��@u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�?u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �>q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Hq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Gq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Fq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Eq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Du}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 e �r+��V��: � � e D�G � 176d124a27956ac315b44b6b42bb13fe2fa7702d805ae7b58731b8d634bc0a2eD�F � 34210a0ec25b1987cb28b7719bb7ab7d7eff1adb56711dc0f4835ba89256cc82D�E � bf1f40d6279d065b649f886d586e1bc6bb518de89df420459f9ba36c8a3f403aD�D � 129f6f9ff00bcf11fa14cab3ec12d80bf9b9612f1194adc7aaacead1b3e7b651D�C � 4935d172a32f8bef9fd07236702a965e4d14a6e86b534e6c52fbe4aad6047e03D�B � 87fc214b49a5aba9c5d113e739d9654287b4a0272123ff8eead1a12b7c845ec3D�A � 4e0fff288896ea81f4c997cb6ce0c357c6515c6987555c53ddbd8c800177f083D�@ � a8c33d4ab95933b150aa784ba9bae1d03d59e6633afd229fc51bafff1df0e892D�? � e36b9d803bc4c2cac122e737759eaaf8944848895c016d80232d05a405a97587D�> � e7be65394477619c3bc276a472efa4a7f642dce66c5dee203826d0391223391aD�= � 5d10762096ebcbd7efdc8eecb2d15ca2b35d49c6fbf417a3f85b555ac622eafcD�< � ed6e07b307de61a56b4041aaba7661b6fcdeb599402390671b3db4d8c0b4cdfcD�; � 8f01b6b2a6ce4e4129d3b25510ee332c113e0f671df54f56ad2dff8e711a11b8 K v�� K �9�Mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Lq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Kq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Jq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Iq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Sq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Rq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Qq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Pq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Oq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Nu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Wu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Vu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Uq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Tq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �^q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�]q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�\q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��[q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Zq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Yq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��dq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�cq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�au��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��`u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�_u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��iu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �gq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�fq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�eq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �oq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�nq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��mq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�ju��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�su��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��ru�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�qu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �pq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �zq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�yq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��xq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�wq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�vu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �~q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�}q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�|q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��{q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �!q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�'u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�&u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�%u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��$u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�#u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �"q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �,q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�+q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��*q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�)q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�(u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�1u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �0q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�/q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�.q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��-q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�7q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��6q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�5q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�4q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��3q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��2u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�<u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��;u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�:u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �9q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�8q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Bq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Aq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�@q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��?q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�>q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�=q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Hq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Du�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 e �r+��V��: � � e D�T � 7d006c10e1e850ab6583783df33de8d968fa27fd47068c159bb2bac55c7eeecaD�S � 222d1cb4f63704dc1cb456a7733ac13be509de7210e4f3ef68095502f871ad42D�R � 889cf274fa9d2dc353f72daefeafeef0bab8bbc22a11e69f5009602f524dfc5fD�Q � b023cc7bb4beba93c1fa4b4ea3d00f85891637ae3f1692b51863007e799f93e4D�P � 8649585113a6705fe59be338b82b0ec406c0c3351b940dbebdffabd40fbc2eb5D�O � c24fe30d66c39a6dc7e1701a8503f46d3e747baaf032761258334310ad79e035D�N � 9952c1ad9640539f832b2907ecca1438442f4d21c5b1159a6b061b54d0245407D�M � 600d4f94f14cc026544d704f5a8190f1e11d4020dcff350bfca31fef4c037731D�L � ee225d31e25d3fd9c6524bed27748c75c0944037288a89578e3005fb2eedea8fD�K � b2a7339af908b8ee4bf1f85d0d58404c6e69e1311f16a5ce08f7c4e01629bac6D�J � 3c80748d03286542b429491e9861564380252fcbcd1d92283ddfa799fb2dc3f5D�I � 147dc35e6fff3dff6a81de8b9ddae7411d557a2f80bb93a6b4040fde544b5c73D�H � 0c0ba36a5e8704ab304024f5f4bc9616e4592da8ef6293f27ee584cd13805973 A #� � A ��Mu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Kq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Iq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Rq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Qq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Pu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Vu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Tq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �^q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�]q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��\q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�[q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Zu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �bq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�aq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�`q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��_q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�iq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��hq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�fq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��eq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��du�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��mu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �kq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �tq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�rq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��qq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�pq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�oq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��zq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�yq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��vu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�~u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �}q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�|q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�{q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O� q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w� u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �&q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�%q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�$q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��#q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�"q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�!q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��,q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�+q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�*u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�)u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��(u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�'u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��1u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�0u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �/q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�.q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�-q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �7q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�6q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��5q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�4u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�3u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�2u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�=u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�<u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�;u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��:u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�9u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �8q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Bq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Aq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��@q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�?q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�>u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Gu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Fq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Eq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Dq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Cq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Mq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Lq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Kq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Jq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Iq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Hu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 e �r+��V��: � � e D�a � 733cd7b64f33a955dabc853a4b1cd0c8c37bf1e8e726fc0bacb1d1ce4472cea3D�` � b0a39d51fd2f8d6d5a8f011e24a249847065815606a7f38e2041f4b496cc0190D�_ � a0725d3676ffa6a24b4686e544f68d9c21b869c274d28cebfafb3c70638c371eD�^ � bba4318d019ae161e780b129f85d5ab91b299e3b9745f99a659fc52dacdfb221D�] � 6151436b0cdfffbc9de946bc989ec92ce8de7794357a065c433e0c8dfd3e7fdbD�\ � 7f851a8769285e3f9758a4eaf850aac198635f11095424df455837066af7c141D�[ � 8dbf315b824ef3ed709ed82b3c42515cc6137b6f4eaf95ccff91f5d362b86985D�Z � a1970a5fc923219ddca4fa8d05e7f29ee858edf46448313a44734fb4d4c4149dD�Y � 22e3e72ea0793e34fa431ce4f6c77af3460b1cd5e67558a3b644f1e438900d99D�X � 42ab3de394252ea2575955dde550d26c4c2d82245f48145c1880b3eee1f049e5D�W � f313883838c79487308bec6209cc25ea688f77759c6bbdb331c4237999334033D�V � 31dbae1dc23e561a169170b6a4e76e5abb65227590e305195a2a4c4709cc4a0dD�U � 6fc93f49bcfb356742bd0f053b32fc44739f52e356d8575874ed5e03d9fd09ba � ~�� � |�Ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Qu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Pu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Oq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Nq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Xq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Vq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Tq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Sq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��^q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�]q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�\u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�[u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Zu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��cu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �aq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�`q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�_q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �iq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�hq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��gq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�nu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��lu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �jq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �tq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�sq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��rq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�qq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�pu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�yu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �xq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�vq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��~q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�}q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�|q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��{q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��zu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�!u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �&q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�%q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��$q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�#q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�"u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�+u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �*q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�)q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�(q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��'q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�1q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��0q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�/q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�.q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��-q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��,u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�6u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��5u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�4u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �3q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�2q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �<q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�;q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�:q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��9q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�8q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�7q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Bq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Aq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�@u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�?u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��>u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�=u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Gu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Eq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Cq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Lq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Kq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Ju��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 e �r+��V��: � � e D�n � 83b3cec745768f57ddcdabe20c4c848fee7126552012cc9fa7a1be366825f4adD�m � b050823fb61726e8976cc72b306b33896e52a61ba34741aaaacac29f20a9d428D�l � f65aabbd9e294d13896f966d93142b9e462abc508dc124cbced08758d3d9247aD�k � f037f86f203b3b15569c8b08388aeeeba9eda00ceac6945410b851d91563d688D�j � de01b8c6bef6e8935094026fbbfa516daaf970a7e92df84e3705c559853ece19D�i � 74cf9b03dd4c4fd8b948481f59523011514a6b13612c953041fe8c112c7aa0d9D�h � e783291d5ab16df4900451958335994c05de05b904aa33cf87682f106e2baf20D�g � 3b72db221eb1db189edcf9c97b83663b0494d24fa1fe73c09e6916b1baaec8e6D�f � eb1886e298af82bc97e979491381fe23e271aabb79f09bef435b84c876817fbdD�e � ad3ed272a76cefffd6cfcbe64c326b1286965a0a1950072cb4a2337f839ca989D�d � a83eb350bcaf8f5bf58970e8c94bdcbdd5f690dc3d7e90d21bf5532d9a597c62D�c � 47ba59d4b1cb5b673b1229b14f41032935be9d093380d4ebda5b7a3a020d1829D�b � c19464cde9f5e6924a75e43dc5a5f2a6f67fe7b180bebf78fe28c2a9ea75b38a $ q4�! � $ |�Su��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Qu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Pu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Nq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Xq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Wq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Vq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Uq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Tu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�]u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �\q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�[q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Zq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Yq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�cq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��bq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�aq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�`q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��_q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��^u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��gu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�fu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �eq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �nq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�lq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��kq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�jq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�iq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��tq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�sq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�qu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��pu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ou��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��yu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�xu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �wq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�vq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�uq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�~q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��}q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�|u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�{u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�zu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V � q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��&q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�%q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�$u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�#u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��"u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�!u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��+u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�*u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �)q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�(q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�'q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �1q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�0q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��/q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�.u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�-u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�,u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� j�7 k�= l�B m�G n�M p�R q�X r�^ s�c t�i u�o v�t w�y x� y� z� {� |� }� ~�! �& ��+ ��1 ��6 ��< ��B ��G ��M ��S ��X ��] ��c ��h ��n ��t ��y �� �� �� �� �� �� �� ��& ��+ ��1 ��7 ��< ��A ��G ��L ��R ��X ��] ��c ��i ��n ��s ��y ��~ �� �� �� �� �� �� ��% ��+ ��0 ��6 ��< ��A ��G ��M ��R ��W ��] ��b ��h ��n ��s ��y �� ¼ ü ļ ż Ƽ Ǽ ȼ% ɼ+ ʼ1 ˼6 ̼; ͼA μF ϼL мR ҼW Ӽ] Լc ռh ּm s ؼx ټ~ ڽ ۽ ܽ ݽ $ q4�! � $ |�7u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�6u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�5u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��4u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�3u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �2q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �<q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�;q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��:q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�9q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�8u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Au��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �@q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�?q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�>q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��=q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Gq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Fq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Eq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Dq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Cq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Bu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Ku�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ju��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Iq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Hq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 e �r+��V��: � � e D�{ � f854a25eb972d3b371b5576e432a9a20947bb7be07e83253e98bd2b39025d16aD�z � daad2593294d57ecd2ba590f2b8292ca6c1a15ac312f2ce7da8dbb7128a21db5D�y � da3a8c2abd8f7012e5d4bebd1103714f6d567dbd1f5281431b01ffd6d61025fbD�x � 48c1cdad82823961370ac3c16ed4a93a8b8b46bde9034024316e1a72af9522d4D�w � c6f14dac0ec25c398840115e52a340353f02aaea3834f3a0eba9c59477ed29acD�v � 682b34f9ba65eb2126b3140d6fe7319d11e990cef5a3d74f66b79f00719e6adaD�u � dba6df762c2a7b4df2011636555ed8910dd7c702ac1a8c2233d5bdc1752907ddD�t � bece87454982682fbdb7722fda453b231999ee186bb714b2151fb7a2f81a9897D�s � 411d4dcdad36f25940ac90a44c595935da1b410049409e9047bf8e5a0d896d00D�r � 0ee97394870cffe996ee7e4b916ac7fd3a1843f7b577ee2bf1a309f6b5e3e325D�q � 79973cc33f53bcaa66861b86f5ca88df66744a2b5a58c2f2f7f0dc2e37c67a36D�p � 0fa4711e307981d6c9174ab9d2a6a3091cae2a4a43da04ce41a45407c143d240D�o � bffc06b208a2645d2beeed5ae0505ff7be55cec6055ed415ae076e3e74f9aa2e 6 0�$G � 6 � �Rq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Qq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Pq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Oq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Nq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Mq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Xq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Vu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Tu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Su��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��]u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�\u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �[q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Zq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Yq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �cq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�bq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��aq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�`u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�_u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�^u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�hu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�gu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��fu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�eu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �dq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �nq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�mq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��lq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�kq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�ju}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�su��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �rq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�qq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�pq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��oq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�yq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��xq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�wq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�vq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��uq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��tu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�~u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��}u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�|u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �{q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�zq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & �� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V � q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O� q�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w� u}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�%u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �$q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�#q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�"q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��!q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�+q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��*q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�)q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�(q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��'q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��&u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�0u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��/u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�.u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �-q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�,q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �6q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�5q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�4q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��3q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�2q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�1q�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��<q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�;q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�:u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�9u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��8u�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�7u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Au�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�@u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �?q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�>q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�=q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Fq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Eq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Du��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Cu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Mu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Ju�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Hq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Rq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Qq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Pq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Oq�/�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Nu}�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 e �r+��V��: � � e D� � 8ba45a2931417326f5988ff2fa9db54c083bfab2f5fe260ea31072a26b0d9adbD� � d60ccb9327412f5e9b92a65ce3c4d3ec7c9cef9e0d21433888157b9758c62587D� � 966ec9754e2cc3fe39729998dcef6f877a9061b02c36cada54ff696eb4dd98c6D� � ab37db3638f3d63077ca3270c6b587f0147ede183844f7fd95cc12babea8f8a8D� � 94aaf8d6f0db1300c892d45a1a8334173bca651326cfadf717623f714460fe61D� � 6838d1704d6089791d6b3d53de842f0901465128bc97227e71cbfb2073418234D� � 03ea957f3e2be56bc876a29ef48424ad8cc38c240505a263f9907bb55882d20fD� � 32fdc77032a9de115471b54289fc5f0fd4e2fe3f428c90a14db22d18d246a781D� � 0f2b27230afc7e0f0e4681b53e974e613f93cdd1f542dd4b63a37b74db2caa55D� � 6d6d3ccc17a9eee0b41995b6db620df39e9070da91831a1ee3a9c9f9bf6eb135D�~ � d0a250d18f4b89599438cfd448782db11f8012472af6df48eced91d60be23eb0D�} � aae99874c09826e7ffdc47307dc7fa4aa1ef9302e99a8432186772a7619d629dD�| � 7621e69d1f6a5287ec45f7ae6e9410b61ce65c095de32ed792b022a4520de7d1 K v�� K �9�Wu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Vq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Uq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Tq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Sq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�]q�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��\q� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�[q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Zq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Yq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Xu�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�bu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��au�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�`u��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �_q�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�^q��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �hq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�gq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�fq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��eq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�dq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�cq�)�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��nq� �Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�mq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�lu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�ku��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��ju�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�iu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��su�-�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ru��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �qq�'�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�pq��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�oq�C�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �yq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�xq�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��wq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�vu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�uu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�tu��Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�~u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�}u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��|u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�{u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �zq�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w� u} Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & �� q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��%u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�$u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �#q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�"q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�!q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �+q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�*q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��)q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�(u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�'u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�&u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�1u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�0u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�/u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��.u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�-u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �,q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �6q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�5q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��4q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�3q�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�2u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�;u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �:q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�9q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�8q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��7q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Aq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��@q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�?q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�>q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��=q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��<u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Fu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Eu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Du�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Cq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Bq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Lq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Kq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Jq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Iq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Hq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Gq�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Rq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Qq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Pu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Ou�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Nu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Mu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 e �r+��V��: � � e D� � 45aa06d1829f4839d099598b630eabc9be0756f534ae4a81d0d6b7ab5922bc09D� � 4e697ffc60fca75a99deb8089617f94c12550b52fd5e8a07ec885967667c7541D� � b6d54a557b4be65879c789367443480c4c3cb12adfbb35c324b6786e2f8ba2a7D� � 65b46c58329dcd3a310fbfb4c8b9371639bb59c96629f150e82a7820305f44fbD� � fc3bab612213d15e8f3305d921a6c746a042fa8d06b3e8b75aa25f4eeced3daeD� � 83c007c9ec430e38dbcdce8b868daa1718da2090b7ef60980dfaeff2c633aa2fD� � 25c4de241ae499bb87004a0bd23c0264cf0e5ec7003c83fa57962fc6ca0fff80D� � d63186e6cef38839b7dec9223b2e71fce4525a6125dbb201cab77ddcd29b6eb3D� � 8126411e939ed28c342373246930b21454d5af2651f4d36c56e7d17b279978ffD� � e4d444d844a4cafb1f7e4fa1a67562e38078b7cbb3816a7216492e9a2d40c822D� � b067b77274a7e008ceafa9fe949f6649af4f291e1fe843cc01d5255b977ff6beD� � 08ec368681cd5235d44e7c13637d697d5bc44aaf5cfd9f49fc33531191a5717bD� � dbc4de07d0e60afa27428cc96344b4424c8cf8209e8961f014f4989de0ede96d A #� � A ��Wu�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Vu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Uq�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Tq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Sq�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �]q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�\q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��[q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Zu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Yu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Xu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�cu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�bu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�au� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��`u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�_u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �^q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �hq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�gq�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��fq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�eq�/ Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�du} Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�mu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �lq�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�kq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�jq�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��iq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�sq�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��rq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�qq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�pq�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��oq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��nu�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�xu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��wu�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�vu� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �uq�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�tq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �~q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�}q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�|q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��{q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�zq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�yq�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A �� u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�%q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��$q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�#q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�"q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��!q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�� u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�*u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��)u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�(u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �'q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�&q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �0q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�/q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�.q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��-q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�,q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�+q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��6q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�5q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�4u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�3u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��2u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�1u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��;u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�:u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �9q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�8q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�7q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Aq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�@q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��?q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�>u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�=u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�<u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Gu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Fu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Eu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Du�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Cu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Bq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Lq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Kq�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Jq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Iq�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Hu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Qu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Pq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Oq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Nq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Mq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Wq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Vq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Uq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Tq�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Sq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Ru�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 e �r+��V��: � � e D�" � 3af5287deb01c0880a6d6916b3fc0ecdfaf93e576369b1b9cfdcc1613bc22a7dD�! � 33beb19a202929092a6e1605a3f6115c5442714589a627267a8ba12528865a7eD� � 8cab4a117a1efc20543417ed7f4d69f0626329800f58029dc586d0a2bdadea33D� � 27091e98db08364ca7ce67c92ed7fea1f2ef9a1b64dd06f659d6bb1cf563d729D� � a4aa01b378a3f60ccb4500c7b55fd5e37fde220dcb3863302b729de23aefcf5aD� � 332d0c5fbd59617b2854c4ef7acc7a7862676bdf591666e519d3b09c2f3435e8D� � ecb4654a5f2ad2d8e3539f0b0076eee523a54eda425ef270ec5cb0394fa1ea8cD� � 04338d51e121bd3112024a6e032e9dc376c437e7d1914a17d85868c3c59e8f72D� � d31ed1bf33208a48c1659c4aa33c952c4a88624e0ef52fdda4e5cb196354ac40D� � d264ee805ecda49c30b17382368adfa7d60dde5fe60862b200ff3a5b11b02cfaD� � 248724675fc45561c18b6906dfbeacda8c1e9b4451c512be528649e3e34c63b9D� � cd5dcd832d5dda7bea32dbdbe45ad8e13ef022b0a9d83e5b78427944aaab8f18D� � 847a5e41805b10521ebc6aff29431992c0a22a8d17c634a1e13970158fa1af9c � ~�� � |�\u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��[u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Zu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Yq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Xq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �bq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�aq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�`q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��_q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�^q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�]q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��hq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�gq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�fu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�eu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��du�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�cu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��mu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�lu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �kq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�jq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�iq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �sq�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�rq�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��qq� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�pu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�ou�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�nu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�yu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�xu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�wu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��vu�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�uu�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �tq�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �~q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�}q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��|q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�{q�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�zu}Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y� q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A �� u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �%q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�$q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��#q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�"u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�!u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�+u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�*u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�)u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��(u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�'u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �&q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �0q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�/q�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��.q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�-q�/ Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�,u} Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�5u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �4q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�3q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�2q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��1q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�;q�C Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��:q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�9q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�8q�) Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��7q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��6u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�@u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��?u�- Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�>u� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �=q�' Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�<q� Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Fq�'!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Eq�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Dq�C!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Cq� !Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Bq�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Aq�)!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Lq� "Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Kq�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Ju�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Iu�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Hu�-!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Gu�!Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Qu�-"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Pu�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Oq�'"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Nq�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Mq�C"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Wq�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Vq�C#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Uq� #Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Tu�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Su�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Ru�"Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 e �r+��V��: � � e D�/ � f5670dae0add00bdfd492611247f9503be7281552df1cc745f5b359269462efdD�. � 64eaa7b016a8e2dfc63c23045a2a81e467d7e0553af8d19b447d9f84265a2b26D�- � ae4a37c25fe4cd0a6a91a2140530796b4b2c6059cf099f2bd2f65504b92e3742D�, � 53777bef4b884ec988d12664f72eaadc76fa2b24890080c6649e74f9c9769d94D�+ � f7c83637d8468e19213b90ac92d161c309fd5941a55567c16d8598b7ff66e882D�* � 6389f5f5c812cb020dd4bcf4dc948be8137ffef92ecbea10a81268530ca43c7bD�) � 18a944fd24888ada7034062b23c8096dad6ee599c3c1262ac434394919b64aeeD�( � 4535717be95f1dcc2921d19bb37276451f877f99558ee69df6a67597d545a010D�' � 15a85325dd91b5d41165cb155f2faac7f1c67c75551d52a664027fc559a5c62cD�& � 2676b39f946e027f903e8815ed686e37a2b8101f353ca2063367ccce93da761bD�% � 2aba6dcda4b716437cd39f662b144aa8fe26ea6f15b54f36ae5c7340a33c8b36D�$ � 5bf7fa347b641deaa5b1dd5752635a5a43ee644e71cca2e924839f74490cf862D�# � 3baf28c0979d5f90558e58f7499f8c92082cc8e9b4e8e68acfa4d95a6a902be4 $ q4�! � $ |�]u�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�\u�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�[u�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Zu�-#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Yu�#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Xq�'#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �bq�$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�aq�)$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��`q� $Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�_q�/$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�^u}#Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�gu�$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �fq�'$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�eq�$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�dq�C$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��cq� $Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�mq�C%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��lq� %Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�kq�%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�jq�)%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��iq� %Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��hu�-$Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�ru�%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��qu�-%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�pu�%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �oq�'%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�nq�%Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �xq�'&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�wq�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�vq�C&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��uq� &Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�tq�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�sq�)&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��~q� 'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�}q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�|u�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�{u�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��zu�-&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�yu�&Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�''Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � � q�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� (Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�'Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�u�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�))Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� )Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�q�/)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�u}(Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�')Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� )Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y� q�C*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� *Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� *Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-)Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 of Uflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �% �* �0 �6 �; �A �G �L �Q �W �\ �b �h �m �s �y �~ � � � �� �� �� ��% ��+ ��0 ��5 ��; ��@ ��F ��L �Q �W �] �b �g �m �r �x �~ � � � � � � �$ �* �0 �5 �; �A �F �K �Q �V �\ �b �g �m �s !�x "�} #� $� %� &� '� (� )�% *�* +�/ ,�5 -�: .�@ /�F 0�K 1�Q 2�W 3�\ 5�a 6�g 7�l 8�r 9�x :�} ;� <� =� >� ?� @� A�$ B�* C�/ D�5 E�; F�@ G�E H�K I�P J�V K�\ M�a N�g O�m P�r Q�w R�} S� T� � ~�� � |�$u�*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��#u�-*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�"u�*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �!q�'*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�*Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �*q�'+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�)q�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�(q�C+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��'q� +Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�&q�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�%q�)+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��0q� ,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�/q�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�.u�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�-u�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��,u�-+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�+u�+Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��5u�-,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�4u�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �3q�',Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�2q�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�1q�C,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �;q�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�:q�C-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��9q� -Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�8u�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�7u�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�6u�,Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Au�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�@u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�?u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��>u�--Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�=u�-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �<q�'-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �Fq�.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Eq�).Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Dq� .Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Cq�/.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Bu}-Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Ku�.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Jq�'.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Iq�.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Hq�C.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Gq� .Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Qq�C/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Pq� /Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Oq�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Nq�)/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Mq� /Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Lu�-.Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Vu�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Uu�-/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Tu�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Sq�'/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Rq�/Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 e �r+��V��: � � e D�< � 8864cd46b197d894c0037ac70b483f8091d39212b9cf6ace09e8c117d76a1c12D�; � 0dc9fbacba7b11cb8fe67dd7a2596d89132d937ce3099a1e872d630f5f68fafcD�: � 5a34d2e48c7b78b23d4ae6c9697fa3094d3e9bc3dfdb7d09f1670206a32b7e46D�9 � 23bb9783bb909c0cddbbcaeb08d2ecd0d27ba3325b65571783ef5837be019a60D�8 � af59395f80e4a8af28d6c6ccafe41de973b85b01eae99f978460cfe0198a5ee6D�7 � f93d558436474dcf26feea265313045cb98abbe57849c1f0f07a622d83612eb1D�6 � 30fb1512e1cb3b565ab1bc735499011c641766b730df4ce0ba6baf035db92c70D�5 � 9d6605784a491b25286fafef98f82226f7634b2197c483f0273690b3701d2853D�4 � cfbce8f5d94f01a7ce8c1dc8545168b7c3c1c2a62bae89f00a69ebd439002ffaD�3 � c5b8ab0d8d7cb70f48d43af7b11ed34cd4a069ee3f243e0b5c1601adbbf3b7baD�2 � 87421442fb8dc3f0b7025e35dcc33c47b33e35e6cff668106fc871a7fdc443b7D�1 � 9bbb081fdd6485184aa28dae8f3c1946680fdf0f31efe538dc75912939ac72efD�0 � 041f5f1e8b93254eb47e8b18434325a8ecfea6152330918662e991c8b435cdfe 6 0�$G � 6 � �\q�'0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�[q�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Zq�C0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Yq� 0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Xq�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Wq�)0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��bq� 1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�aq�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�`u�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�_u�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��^u�-0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�]u�0Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��gu�-1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�fu�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �eq�'1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�dq�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�cq�C1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �mq�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�lq�C2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��kq� 2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�ju�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�iu�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�hu�1Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�su�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�ru�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�qu�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��pu�-2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ou�2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �nq�'2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �xq�3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�wq�)3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��vq� 3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�uq�/3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�tu}2Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�}u�3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �|q�'3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�{q�3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�zq�C3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��yq� 3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�C4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� 4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� 4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��~u�-3Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u�4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�4Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289� q�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� 5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� 6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�u�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�5Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�C6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � � q�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y� q�C7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058�� q� 7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|� u�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�6Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�%u�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�$u�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�#u�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��"u�-7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�!u�7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� � q�'7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �*q�8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�)q�)8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��(q� 8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�'q�/8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�&u}7Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�/u�8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �.q�'8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�-q�8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�,q�C8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��+q� 8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�5q�C9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��4q� 9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�3q�9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�2q�)9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��1q� 9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��0u�-8Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�:u�9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��9u�-9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�8u�9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �7q�'9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�6q�9Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �@q�':Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�?q�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�>q�C:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��=q� :Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�<q�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�;q�):Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��Fq� ;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Eq�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Du�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Cu�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Bu�-:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Au�:Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��Ku�-;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Ju�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Iq�';Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Hq�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Gq�C;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �Qq�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Pq�C<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Oq� <Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�Nu�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Mu�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Lu�;Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�Wu�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�Vu�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Uu�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Tu�-<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Su�<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Rq�'<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �\q�=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�[q�)=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Zq� =Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�Yq�/=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�Xu}<Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 e �r+��V��: � � e D�I � 0e63c2347e36ece8d4f15909b64a5a6c3b79f38a6e53f614e310fbfd86f26b06D�H � f9c8ee59079e1a20cac32e3fe1b20f6f94b271c132efb4de7f5f0ebad73c632dD�G � 6813b3fd706e79a0721cb26c926c2fdd57aaf1300c3f48cd8573cbf02eb06168D�F � 3a7a5d5027216e07b3eae0f5b2cf013760700d03cca8961ca4395cd637ac3c5eD�E � 2b0dc7f8c8bffbe06bd0124f1cbc07bb9eda4e34b45db595e6101d68eee5ebedD�D � 37356ac1734506c064e4fdf1e87d69a442a12767a7e98626e8c9c571fb460198D�C � 4874985f1d75f7c43dceb6929982f36fc7a9566042a70c22a42bc6e3e6a65b58D�B � a52c89128003d6c528346ece42b32f7126708399f05995deaa7aa1e7035625a9D�A � 9c90fdb57f5b173c0200715d87a85083b5f8dd268a7aef1df7baddcd4f7ba0adD�@ � c7df39cc317144af8cab982c0134ec6182c78bfaafe8e47f94f33a0cd4991c97D�? � c9587fe47330c8c9650ddea3de6ed9574b7027a816ed5dc48c5f19783f043700D�> � 9db93e031838e2ddbd104024296a70bd847b8e704bfa2e92f767297158bf6b6cD�= � a219a29b75fdb33749412440d21f8b1ff92ad6616637e7e8cb818daf66fabe36 K v�� K �9�au�=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �`q�'=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�_q�=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�^q�C=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��]q� =Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�gq�C>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��fq� >Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�eq�>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�dq�)>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��cq� >Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��bu�-=Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�lu�>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��ku�->Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�ju�>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �iq�'>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�hq�>Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �rq�'?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�qq�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�pq�C?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��oq� ?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�nq�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�mq�)?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��xq� @Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�wq�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�vu�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�uu�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��tu�-?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�su�?Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��}u�-@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�|u�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �{q�'@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�zq�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�yq�C@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CAOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|� u�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�~u�@Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |� u�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �q�BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -�� q� BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O� q�/BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w� u}AOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�u�BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CBOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�q�CCOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��q� COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��u�-BOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |� u�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�COyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �$q�'DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�#q�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�"q�CDOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��!q� DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L� q�)DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��*q� EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�)q�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�(u�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�'u�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��&u�-DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�%u�DOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��/u�-EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�.u�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �-q�'EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�,q�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�+q�CEOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �5q�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�4q�CFOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��3q� FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�2u�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�1u�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�0u�EOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�;u�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�:u�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�9u�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��8u�-FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�7u�FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �6q�'FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �@q�GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�?q�)GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��>q� GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�=q�/GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�<u}FOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�Eu�GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Dq�'GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Cq�GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Bq�CGOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Aq� GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�Kq�CHOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Jq� HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Iq�HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Hq�)HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��Gq� HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��Fu�-GOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�Pu�HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Ou�-HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Nu�HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �Mq�'HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Lq�HOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �Vq�'IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�Uq�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�Tq�CIOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��Sq� IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�Rq�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�Qq�)IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��\q� JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�[q�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{�Zu�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�Yu�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��Xu�-IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�Wu�IOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 e �r+��V��: � � e D�V � e1db7a00d2204d116b7e75f87e236094c6578a2ebf4a48a7af11edd3618ebce3D�U � b233baa0fb9d61676aea025d1f7b834810ad66467adee309673c302ed29261eeD�T � 87b930e9a82a5887d60c5bf35a95284a59744832eca1423a916a46ac5dc807a3D�S � 7d0c45c842a51eb4e14eecce16a8da906ea6668258c6fe279d9649645d4bd422D�R � a4124d55ffe94d6e2682cb82eb1191d84b8b271f2950a8cbf86be4ade606a768D�Q � 58a5f6025a63f07b9dc9793ec13c58029a3502315d1bb29d4c7015091c9e8dbeD�P � c565a665dee8bff0a1df1f9e228b65e7935723b9a6e91ae26f4b30dc3b90452bD�O � 2f00c2ff15b5c113c361dc4ad8be22ff7ec2bde7c1098b7abe496171dc1d7b49D�N � 84e0987f67e674a41976b9cd147cec00e6c57db8a4feeb9b141b7fb607b890efD�M � 8d6cfc5c9cef32a028f7938e7be7de7b81bde37d434b23891fb9c2f0583c18dfD�L � 164f86624a46a2f71b3b2a951d0544b44be7971180929255dc526785acc3a143D�K � 758f0b0b263f27bf6a17362a156e2d236f0210bb8fd11a69dbd5e2d9ca1be328D�J � c0676678d1a3bcf8ce6a786607357db6145dd2dff6d685cc3e3b7312511343fc A #� � A ��au�-JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�`u�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �_q�'JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�^q�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�]q�CJOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �gq�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�fq�CKOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��eq� KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�du�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�cu�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�bu�JOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |�mu�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�lu�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�ku�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��ju�-KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�iu�KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �hq�'KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 V �3� � V �rq�LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�qq�)LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��pq� LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818�O�oq�/LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31^ ��- fence_compute/fence_evacuate: fix region_name content type and project shortopt in usage text and project-domain shortopt Resolves: rhbz#1760203 - fence_rhevm: add cookie support Resolves: rhbz#1763675 - fencing: improve stdin quote parsing Resolves: rhbz#1769784w�nu}KOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 K v�� K �9�wu�LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �vq�'LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�uq�LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�tq�CLOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��sq� LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561 ( l�� ( �Y�}q�CMOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��|q� MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�{q�MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�zq�)MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 -��yq� MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-33^U @- fence-agents-lpar: build on non-ppc64le arch's Resolves: rhbz#1801818��xu�-LOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114 � ~�� � |�u�MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735��u�-MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�~q�MOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738 6 0�$G � 6 � �q�'NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CNOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561�q�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205�L�q�)NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34^g�@- fence_aws: improve parameter logic to allow setting region parameter while using credentials from ~/.aws/config Resolves: rhbz#1673468 - & �/�2 � & ��q� OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561� q�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-35^|�@- fence_aws: fix possible race condition Resolves: rhbz#1816205{� u�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9� u�NOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024 A #� � A ��u�-OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289�q�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�COOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058 � ��� � �q�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-40^��@- fence_vmware_rest: fix encoding issues Resolves: rhbz#1793738�Y�q�CPOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39^��@- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit and avoid failing when hitting it during the monitor-action Resolves: rhbz#1654058��q� POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-36^��- fence_vmware_rest: improve exception handling Resolves: rhbz#1827561|�u�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{�u�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|�u�OOyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735 $ q4�! � $ |� u�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.5an�@- fence_aws: add "filter" parameter Resolves: rhbz#2003189{� u�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.4`��@- fence_azure_arm: fix MSI support Resolves: rhbz#1957762|� u�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.3_�@- fence_aws: add support for IMDSv2 Resolves: rhbz#1905735�� u�-POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.2_w@- Upgrade bundled python-httplib2 to fix CVE-2020-11078 Resolves: rhbz#1850114�9�u�POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1_'�@- fence_lpar: fix issue with long username, hostname, etc not working when the command run by the agent exceeds 80 characters - fence_evacuate: enable evacuation of instances using private flavors Resolves: rhbz#1860545 Resolves: rhbz#1862024� �q�'POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41^˳@- fence_aws: improve logging and metadata/usage text Resolves: rhbz#1832289 K ��?��I � � K O�)aAQEike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�(_SQJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�'aAQEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�&aAQEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�%aAQEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�$aAQEike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��#_�-QJan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�"aAQEike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�!_wQJan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresw� u}POyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.6b�@- fence_aws: fix IMDSv2 support Resolves: rhbz#2050759 q �@�e�o � q O�3aAREike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�2_SRJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�1aAREike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�0aAREike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�/aAREike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�.aAREike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��-_�-RJan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�,aAREike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�+_wRJan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresQ�*cCQEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1 3 �#�-��/ � � 3 Q�>cCSEike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�=cCSEike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�<cCSEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�;aASEike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�:_SSJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�9aASEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�8aASEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�7aASEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�6aASEike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��5_�-SJan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9Q�4cCREike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1 5 w%��/��/ � � 5 O�IaAUEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1Q�HcCTEike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�GcCTEike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�FcCTEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�EaATEike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�D_STJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�CaATEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�BaATEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�AaATEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�@aATEike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��?_�-TJan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9 - �\�\�% � - O�TaAVEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�SaAVEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1Q�RcCUEike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �Qe�3UAnton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�PcCUEike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�OcCUEike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�NcCUEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�MaAUEike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�L_SUJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�KaAUEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�JaAUEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2 % �T�Zw# � w % O�_aAWEike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�^_SWJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�]aAWEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1Q�\cCVEike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �[e�3VAnton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�ZcCVEike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�YcCVEike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�XcCVEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�WaAVEike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�V_SVJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�UaAVEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1 e �r+��V��: � � e D�c � 158e955d20950ef61a38c645accc22bd6cf37c7f31e06cdd3313c2bc5b0d969fD�b � 74484befc2ade710df325b9af62b87ffaef3b2b13a00935396297467ec8e98a8D�a � e0d62271ecc1d123dd2dfe6e63131923215ed05f9f87bb42cbe1c713b4cfec5dD�` � 4eb117f25866c9e447c845336fe608b5c30ec80262a6ffb3dfb33756f0001e62D�_ � dd98390ecb2875b55a18bb8ce2f4fe960e7d8f308cf206decddcbcf25c6638c0D�^ � 9e0249e756fa1e3dfb334a1acf42d322e19676dcef92227940e29b52a2972853D�] � 6341f007df657335759aa49bd308613667e9481106e29eff6fe1a74abfc9200aD�\ � ce4f5cfaaa8ee847baeaa1449c9bda07462f87ac1b32027dc3d2b1086d417890D�[ � 3fb0b77a99715fb931ff65f91089240046d339752c82495a1069470792e26818D�Z � 155f2a67548cb8ab54265b28dbf3f1e731e26cf182da45d98c95425930890046D�Y � 97f2f474f7e410b8f477b1e905b6207ab4497c4def5fa6005eca7739687d0fcaD�X � c3729b12ca4075c75da87d40054a8cd81d3a2be928846fec9b090f2282da0809D�W � f0254a038a74be08cf548424dccbe986696e47e0e50cd52cf8f1ecdf5cf432b0 ' �Xu!�y' � { ' Q�jcCXEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1O�iaAXEike Rathke <erack@redhat.com> - 102.9.0-4d �- Update to 102.9.0 build2W�h_SXJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�gaAXEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1Q�fcCWEike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q�ecCWEike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1Q�dcCWEike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �ce�3WAnton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�bcCWEike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�acCWEike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�`cCWEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1 B �X�u!�y% � B � �te�3YAnton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�scCYEike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�rcCYEike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�qcCYEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1Q�pcCXEike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q�ocCXEike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1Q�ncCXEike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �me�3XAnton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�lcCXEike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�kcCXEike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1 . �X�[ �e � . Q�cCZEike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1� �~e�3ZAnton Bobrov <abobrov@redhat.com> 102.11.0-2dl��- Do not import cert to certdb on override exception: rhbz#2118991 mzbz@1833330Q�}cCZEike Rathke <erack@redhat.com> - 102.11.0-2dS�@- Update to 102.11.0 build2Q�|cCZEike Rathke <erack@redhat.com> - 102.11.0-1dP�@- Update to 102.11.0 build1Q�{cCZEike Rathke <erack@redhat.com> - 102.10.0-1d,@- Update to 102.10.0 build1K�zc7YEike Rathke <erack@redhat.com> - 102.14.0-3d��- Bump NVR to rebuildR�yaGYJan Horak <jhorak@redhat.com> - 102.14.0-2d��- Rebuild due to rhbz#2228948Q�xcCYEike Rathke <erack@redhat.com> - 102.14.0-1d��@- Update to 102.14.0 build1Q�wcCYEike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q�vcCYEike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1Q�ucCYEike Rathke <erack@redhat.com> - 102.12.0-1dw6�- Update to 102.12.0 build1 0 �X�a�w% � � 0 N� _A[Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O� aA[Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O� aA[Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�aA[Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�aA[Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�]?[Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�_1[Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0K�c7ZEike Rathke <erack@redhat.com> - 102.14.0-3d��- Bump NVR to rebuildR�aGZJan Horak <jhorak@redhat.com> - 102.14.0-2d��- Rebuild due to rhbz#2228948Q�cCZEike Rathke <erack@redhat.com> - 102.14.0-1d��@- Update to 102.14.0 build1Q�cCZEike Rathke <erack@redhat.com> - 102.13.0-2d��- Update to 102.13.0 build2Q� cCZEike Rathke <erack@redhat.com> - 102.13.0-1d�r@- Update to 102.13.0 build1 M �?��U�_ � M l�_}\Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�_A\Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�aA\Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�aA\Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�aA\Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�aA\Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�]?\Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�_1\Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0O�aA[Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O� aA[Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l� _}[Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtc D �\ �f�T � D i�!_w]Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO� aA]Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O� aA]Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l� _}]Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN� _A]Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O� aA]Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�aA]Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�aA]Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�aA]Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1O�aA\Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�aA\Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1 D �\ �f�T � D O�,aA^Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�+_w^Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�*aA^Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�)aA^Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�(_}^Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�'_A^Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�&aA^Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�%aA^Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�$aA^Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�#aA^Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1O�"aA]Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1 _ �\ �J��: � _ O�6aA_Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��5_�-_Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�4aA_Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�3_w_Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�2aA_Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�1aA_Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�0_}_Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�/_A_Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�.aA_Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�-aA_Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2 _ �\ �J��: � _ O�@aA`Eike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��?_�-`Jan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�>aA`Eike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�=_w`Jan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�<aA`Eike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�;aA`Eike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�:_}`Jan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�9_A`Jan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1O�8aA`Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�7aA`Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2 _ �@��0�U � _ O�JaAaEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�IaAaEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�HaAaEike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��G_�-aJan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�FaAaEike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�E_waJan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�DaAaEike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�CaAaEike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�B_}aJan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�A_AaJan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1 _ �@��0�U � _ O�TaAbEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�SaAbEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�RaAbEike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��Q_�-bJan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�PaAbEike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�O_wbJan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�NaAbEike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�MaAbEike Rathke <erack@redhat.com> - 102.4.0-1cF�@- Update to 102.4.0 build1l�L_}bJan Horak <jhorak@redhat.com> - 102.3.0-7cEZ�- Fix for expat CVE-2022-40674 and non functional webrtcN�K_AbJan Horak <jhorak@redhat.com> - 102.3.0-6c p�- Update to 102.3.0 build1 ! �B�g�q � s ! O�_aAdEike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1O�^aAcEike Rathke <erack@redhat.com> - 102.9.0-3d �- Update to 102.9.0 build2W�]_ScJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�\aAcEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�[aAcEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�ZaAcEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�YaAcEike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��X_�-cJan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�WaAcEike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�V_wcJan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer featuresO�UaAcEike Rathke <erack@redhat.com> - 102.5.0-1ck�@- Update to 102.5.0 build1 e �r+��V��: � � e D�p � 2a94cd35eaf2c096188c8f30e38bb1ae656122294b6b2f692f185e9533bf7f02D�o � 4612dc1b815321d8acda2baafa9107d32d2e88453f1c98a341c59936db87f826D�n � 64a964dbf122edcb897186c8824b60976d45bd7ddce017d938404771e1396a1eD�m � 7724d8a7b5c53b6b19107130e41d127672ad5e6814dd6d9cdf6130a27f22354bD�l � 6a6db0a030199ad5a8e0edde0f8458ca5391f94ac4ccd7a93c3c186326026cc3D�k � d09bdd004c3fac87661119d619afb43d9ad9824ef8a2e58fa51c55f0211f12d9D�j � de58dba9cc8af79c110d13626931309529fa1a8782a121fbfc29dd03e58e58b6D�i � 13154f5e2510e00d260ae211027b13f44ca11e49508ba2237ccccda2eea337b2D�h � fc48a72a9a0a8898553b10f1e151b5cb865e23d1ae5200c58cf22572c71ff6acD�g � a6fc6ceec2ef96703e31fadfc56988518eb77de39ff4fd2e69fa98b88e033dd7D�f � 843fb795c9bf323f16859c41219123409abcc114812537da012befe15091fbc3D�e � 6d8bf16512d109e75893de1fd5c3fff8aa8557a12556eccd6e6c8fbfd7f184adD�d � a83374c57cbdfe6fe09065ecf3df2781d4ed835b1b41143f2b4e74dde0e6a8cd 5 �B�g�q � � 5 I�j]9eJan Horak <jhorak@redhat.com> - 68.6.1-1^��- Update to 68.6.1 ESRA�iG?eJan Horak <jhorak@redhat.com>^_�@- Update to 68.6.0 build1O�haAdEike Rathke <erack@redhat.com> - 102.9.0-3d �- Update to 102.9.0 build2W�g_SdJan Horak <jhorak@redhat.com> - 102.9.0-2d �@- removed disable-openh264-downloadO�faAdEike Rathke <erack@redhat.com> - 102.9.0-1d'@- Update to 102.9.0 build1O�eaAdEike Rathke <erack@redhat.com> - 102.8.0-2c�w�- Update to 102.8.0 build2O�daAdEike Rathke <erack@redhat.com> - 102.8.0-1c�=@- Update to 102.8.0 build1O�caAdEike Rathke <erack@redhat.com> - 102.7.0-1c�S@- Update to 102.7.0 build1��b_�-dJan Horak <jhorak@redhat.com> - 102.6.0-2c��@- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9O�aaAdEike Rathke <erack@redhat.com> - 102.6.0-1c�.�- Update to 102.6.0 build1i�`_wdJan Horak <jhorak@redhat.com> - 102.5.0-2c��@- Added libwebrtc screencast patch for newer features _ �W�g"��T � _ W�vmEfMartin Stransky <stransky@redhat.com> - 68.7.0-3^��@- Added fix for rhbz#1821418L�u]?fJan Horak <jhorak@redhat.com> - 68.7.0-2^�k@- Update to 68.7.0 build3I�t]9fJan Horak <jhorak@redhat.com> - 68.6.1-1^��- Update to 68.6.1 ESRA�sG?fJan Horak <jhorak@redhat.com>^_�@- Update to 68.6.0 build1B�rGAeJan Horak <jhorak@redhat.com>_>e�- Update to 68.12.0 build1B�qGAeJan Horak <jhorak@redhat.com>_{�- Update to 68.11.0 build1B�pGAeJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�oG}eJan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�nGIeJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesA�mG?eJan Horak <jhorak@redhat.com>^�l@- Update to 68.8.0 build1W�lmEeMartin Stransky <stransky@redhat.com> - 68.7.0-3^��@- Added fix for rhbz#1821418L�k]?eJan Horak <jhorak@redhat.com> - 68.7.0-2^�k@- Update to 68.7.0 build3 U �s��A��S � U [�]]gJan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�_?gEike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M� _?gEike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�_?gEike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�~]?gJan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�}]?gJan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build1B�|GAfJan Horak <jhorak@redhat.com>_>e�- Update to 68.12.0 build1B�{GAfJan Horak <jhorak@redhat.com>_{�- Update to 68.11.0 build1B�zGAfJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�yG}fJan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�xGIfJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesA�wG?fJan Horak <jhorak@redhat.com>^�l@- Update to 68.8.0 build1 G �g�}.��> � � G M�_?hEike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F� _1hEike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[� ]]hJan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM� _?hEike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M� _?hEike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M� _?hEike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�]?hJan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�]?hJan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build1H�a3gEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�_?gEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�_?gEike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�_1gEike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1 x �e�g �~3 � x f�aoiEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�aAiEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�a3iEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�_?iEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�_?iEike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�_1iEike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�]]iJan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�_?iEike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�_?iEike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1H�a3hEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�_?hEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1 [ �T�] �r � [ Y�$aUjEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�#aojEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�"aAjEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�!a3jEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M� _?jEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M� _?jEike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F� _1jEike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[� ]]jJan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM� _?jEike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�_?jEike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1Y�aUiEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release) e �R �i �c � e M�/_?lEike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2O�.aAkEike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�-aUkEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�,aokEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�+aAkEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�*a3kEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�)_?kEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�(_?kEike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�'_1kEike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�&]]kJan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�%_?kEike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2 e �Y �n �W � e M�:_?mEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�9_?mEike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2O�8aAlEike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�7aUlEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�6aolEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�5aAlEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�4a3lEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�3_?lEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�2_?lEike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�1_1lEike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�0]]lJan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepage i �c��L��T � i H�Ea3nEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�D_?nEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�C_?nEike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2O�BaAmEike Rathke <erack@redhat.com> - 78.13.0-2a �- Update to 78.13.0 build2O�AaAmEike Rathke <erack@redhat.com> - 78.13.0-1a /�- Update to 78.13.0 build1Q�@_GmJan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�?aAmEike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�>aUmEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�=aomEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�<aAmEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�;a3mEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0 I �E��C��O � I f�PaooEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�OaAoEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�Na3oEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�M_?oEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1O�LaAnEike Rathke <erack@redhat.com> - 78.13.0-2a �- Update to 78.13.0 build2O�KaAnEike Rathke <erack@redhat.com> - 78.13.0-1a /�- Update to 78.13.0 build1Q�J_GnJan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�IaAnEike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�HaUnEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�GaonEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�FaAnEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1 V �R��Z�m � V Y�[aUpEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�ZaopEike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�YaApEike Rathke <erack@redhat.com> - 78.11.0-1`��- Update to 78.11.0 build1H�Xa3pEike Rathke <erack@redhat.com> - 78.10.0-1`~�@- Update to 78.10.0M�W_?pEike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1O�VaAoEike Rathke <erack@redhat.com> - 78.14.0-1a0��- Update to 78.14.0 build1O�UaAoEike Rathke <erack@redhat.com> - 78.13.0-2a �- Update to 78.13.0 build2O�TaAoEike Rathke <erack@redhat.com> - 78.13.0-1a /�- Update to 78.13.0 build1Q�S_GoJan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�RaAoEike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�QaUoEike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release) A �Z�d�w. � � A B�gGAqJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�fGAqJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�eG}qJan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�dGIqJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesA�cG?qJan Horak <jhorak@redhat.com>^�l@- Update to 68.8.0 build1W�bmEqMartin Stransky <stransky@redhat.com> - 68.7.0-3^��@- Added fix for rhbz#1821418L�a]?qJan Horak <jhorak@redhat.com> - 68.7.0-2^�k@- Update to 68.7.0 build3O�`aApEike Rathke <erack@redhat.com> - 78.14.0-1a0��- Update to 78.14.0 build1O�_aApEike Rathke <erack@redhat.com> - 78.13.0-2a �- Update to 78.13.0 build2O�^aApEike Rathke <erack@redhat.com> - 78.13.0-1a /�- Update to 78.13.0 build1Q�]_GpJan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�\aApEike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1 e �r+��V��: � � e D�} � c51cb2eba6f030cce0b81686cebf834e0aad1fb747875ef6fc8d06c6930fe18aD�| � 2fe8803bf3b71fc183107689fe53ca7b40a655e57b4fc6531786f97143f55b5fD�{ � f455772710a92ccc156759199ca532b9536d567cda99884613c0d4ec6f35ed4cD�z � b351574a459bf47d5aed5e921e49e33fc565cab9b3d72ce5cd6fefba1b6f83c9D�y � a64d622fd50cce3d3743013a5534e4fed4985139f60314ee23246e08601835cfD�x � 765577455a2956ce537d4c4d5768286fbead171668c41853b5d6f0989dd4013cD�w � 6ce9a07c50256531ba281b344b048ba26881b6d3612f2c4ee5f35d0801d8be57D�v � 4276584eb593d2fb304ab50518d7e2c4f955abe8fc5b3d1b9f0dd053d363f298D�u � cb3a549fe050cd75184479500b542065e37366ce62d90769646352bf2d9798a2D�t � d8f95fca6716286e91c7ab7b9be9bd359800c870cc0bdb90128bf93397e9352dD�s � 54c6e6aa53fe175c25dc35fe3f6476d9b195d85a4fc5e64d5625d1731cc5b1ceD�r � c95a549af2d83400b97e70bcf7ebf1fbbb8b58bb768c6f7761edc982d7326504D�q � 06c9237d3d292ac356ab89dc89e2e9d7f41d6b52eaa838d872573cdeac93d2e7 h �m �u1��@ � � h A�sG?rJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�r]?rJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�qGArJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�pGArJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�oG}rJan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�nGIrJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesA�mG?rJan Horak <jhorak@redhat.com>^�l@- Update to 68.8.0 build1W�lmErMartin Stransky <stransky@redhat.com> - 68.7.0-3^��@- Added fix for rhbz#1821418L�k]?rJan Horak <jhorak@redhat.com> - 68.7.0-2^�k@- Update to 68.7.0 build3L�j]?qJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�iG?qJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�h]?qJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1 & �h�{,��I � o & F�GItJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesR�~Ceserack@redhat.com - 78.4.1-1_���- Update to 78.4.1 - Filtering nss/nspr libs��}]�'sJan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�|]AsJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�{]?sJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�zG?sJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�y]?sJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�xGAsJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�wGAsJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�vG}sJan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3F�uGIsJan Horak <jhorak@redhat.com>^�>@- Added s390x specific patchesL�t]?rJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2 _ �X��1�\ � _ B� GAuJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`� G}uJan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3R�Ceterack@redhat.com - 78.4.1-1_���- Update to 78.4.1 - Filtering nss/nspr libs��]�'tJan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�]AtJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�]?tJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�G?tJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�]?tJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�GAtJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�GAtJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`� G}tJan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3 > �l(���z � � > L�]?vJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�GAvJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�GAvJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1`�G}vJan Horak <jhorak@redhat.com>^�@- Update to 68.9.0 build1 - Added patch for pipewire 0.3L�]?uJan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�C1uerack@redhat.com - 78.4.1-1_���- Update to 78.4.1��]�'uJan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�]AuJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�]?uJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A� G?uJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L� ]?uJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B� GAuJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1 R �m �]��5 � � R M�"]AwJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�!]?wJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A� G?wJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L� ]?wJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B� GAwJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B� GAwJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1L� ]?vJan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�C1verack@redhat.com - 78.4.1-1_���- Update to 78.4.1��]�'vJan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�]AvJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�]?vJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�G?vJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1 & {@��]��6 � a & 8�.C1xerack@redhat.com - 78.4.1-1_���- Update to 78.4.1��-]�'xJan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�,]AxJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�+]?xJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�*G?xJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�)]?xJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�(GAxJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1B�'GAxJan Horak <jhorak@redhat.com>^��@- Update to 68.10.0 build1L�&]?wJan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�%]?wJan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�$C1werack@redhat.com - 78.4.1-1_���- Update to 78.4.1��#]�'wJan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading = �b ��;�f+ � � = M�:_?yEike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�9]?yJan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�8]?yJan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�7C1yerack@redhat.com - 78.4.1-1_���- Update to 78.4.1��6]�'yJan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�5]AyJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�4]?yJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�3G?yJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�2]?yJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�1GAyJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1L�0]?xJan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�/]?xJan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build1 H �l(���z+ � � H L�F]?{Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�EG?{Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1M�D_?zEike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�C]?zJan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�B]?zJan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�AC1zerack@redhat.com - 78.4.1-1_���- Update to 78.4.1��@]�'zJan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�?]AzJan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�>]?zJan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�=G?zJan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1L�<]?zJan Horak <jhorak@redhat.com> - 78.2.0-3_;�- Update to 78.2.0 build1B�;GAzJan Horak <jhorak@redhat.com>_�@- Update to 68.11.0 build1 �+��R�b � M�Q]A|Jan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloadingL�P]?|Jan Horak <jhorak@redhat.com> - 78.4.0-1_��@- Update to 78.4.0 build2A�OG?|Jan Horak <jhorak@redhat.com>_d�@- Update to 78.3.0 build1M�N_?{Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�M_?{Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�L_?{Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�K]?{Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�J]?{Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�IC1{erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��H]�'{Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�G]A{Jan Horak <jhorak@redhat.com> - 78.4.0-2_���- Enable addon sideloading T {@��R�- � � T L�\]?}Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�[]?}Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�ZC1}erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��Y]�'}Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�X_?|Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�W_?|Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�V_?|Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�U]?|Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�T]?|Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�SC1|erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��R]�'|Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading k �`�i�Y � k M�g_?~Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�f]?~Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�e]?~Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�dC1~erack@redhat.com - 78.4.1-1_���- Update to 78.4.1��c]�'~Jan Horak <jhorak@redhat.com> - 78.4.0-3_���- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loadingM�b_?}Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�a_1}Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�`]]}Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�__?}Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�^_?}Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�]_?}Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1 e �r+��V��: � � e D� � 524031feb4b382103cd67a6e7a15219524577b7af9ecf3f8b7e5ca443bb043aaD� � c472916040722df81c63f7a4b84001545fcde6fe7ff88a7d90493dac79e09626D� � 97afe94345fd3c005c2618f3f48fcbae76e8b91619f9bfe40ec51d70d2b90c75D� � 6d7bcceec43abb616cbffadcf76d1c208a4f658a0625d17e0b0315b3e5a4c252D� � e063c651b9c19f3ff44c19dafd53594a57c6c58f609c5e0e419a4b724c4b5f87D� � 40f292198cfd1d640409908c391eac750a799c0007158bd95505cc00794862e8D� � 3430976f8acda648d8659eecbc9ab33a1dcb14139a6206b64b25c7a1129d685eD� � 49a94cfaa934548d43b739e469156d5cbf8467609c08c9d7583ecd18912a49b7D� � 66d5ac31048d37a6a1e65da7b344292d028e8fbb82d4b9d710ab79080280254cD� � 98f19e1b800783ce86112ad1cabb55fccc84a4979bb77d07ffceab8d38da6f2aD� � 44600066daf3f3b57b9e269737e0b0dfcd410f3a524fbbd74aec3162d6f84f7cD� � 67cc5f25f8e6a42f9536eb9dbe7e22e3fab22c55d87d37db23cb90136913067eD�~ � 802ef81827f925a8e48e7eac8b4f0c0e44a7873cc15a96c696316840d6541191 B �`�i.��@ � � B [�s]]Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�r_?Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�q_?Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�p_?Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�o]?Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�n]?Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�mC1erack@redhat.com - 78.4.1-1_���- Update to 78.4.1M�l_?~Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�k_1~Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�j]]~Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�i_?~Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�h_?~Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1 W �g��>��N � � W M�_?�Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�~_1�Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1[�}]]�Jan Horak <jhorak@redhat.com> - 78.7.0-3`"y@- Fixing install prefix for the homepageM�|_?�Eike Rathke <erack@redhat.com> - 78.7.0-2` �@- Update to 78.7.0 build2M�{_?�Eike Rathke <erack@redhat.com> - 78.7.0-1`@- Update to 78.7.0 build1M�z_?�Eike Rathke <erack@redhat.com> - 78.6.1-1_��@- Update to 78.6.1 build1L�y]?�Jan Horak <jhorak@redhat.com> - 78.6.0-1_� �- Update to 78.6.0 build1L�x]?�Jan Horak <jhorak@redhat.com> - 78.5.0-1_� �- Update to 78.5.0 build18�wC1�erack@redhat.com - 78.4.1-1_���- Update to 78.4.1M�v_?Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1M�u_?Eike Rathke <erack@redhat.com> - 78.8.0-1`-@- Update to 78.8.0 build2F�t_1Eike Rathke <erack@redhat.com> - 78.7.1-1`"yA- Update to 78.7.1 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� V� W� X� Y�) Z�3 [�> \�I ]�T ^�_ `�j a�t b� c� d� e�! f�, g�6 h�@ i�J j�T k�_ m�j n�v o� p� q� r�$ s�/ t�: u�E v�P w�[ x�g z�s {� |� }� ~�" �. ��: ��F ��Q ��\ ��g ��s �� �� �� �� ��) ��4 ��@ ��K ��W ��b ��m ��y �� �� �� ��' ��1 ��: ��D ��M ��W ��` ��j ��s ��} �� �� �� �� ��' ��. ��7 ��@ ��G ��P ��Y ��c ��m ��w �� �� �� �� ��) ��3 ��= ��G ��Q ��Z ��c ��l ��u ��} �� �� �� ��! ��* ��1 ��9 ��@ ��I ��P ��W ��^ ��e > �%�C�o � � > L� ]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190M�_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M� _?�Eike Rathke <erack@redhat.com> - 78.9.0-1`Q�@- Update to 78.9.0 build1 < �#�A�m � � < L�]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2�� ]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190M� _?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1�� ]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667O� aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1 ! � �H��f � s ! O� aA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O� aA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O� aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190O�aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1 # n �J�i � s # M�)_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2O�(aA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�'aA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�&aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�%]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�$_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�#_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�"_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �!]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M� _?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2�� ]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 / |,��K��U � / � �4]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�3_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2O�2aA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�1aA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�0aA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�/aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�.]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�-_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�,_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�+_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �*]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315 ! �g �}+�� � j ! F�@_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�?_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�>_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �=]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315O�<aA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�;aA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�:aA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�9aA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�8]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�7_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�6_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�5_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3 b �_ �i�C � � b L�K]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�J_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�I_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�H_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �G]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315O�FaA�Eike Rathke <erack@redhat.com> - 91.13.0-1b��@- Update to 91.13.0 build1O�EaA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�DaA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�CaA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�BaA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1L�A]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1 ) �\ �f��O � � m ) A�WG?�Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�VY5�Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�UY1�Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q�T_G�Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�SaA�Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�RaU�Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�Qao�Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8O�PaA�Eike Rathke <erack@redhat.com> - 91.13.0-1b��@- Update to 91.13.0 build1O�OaA�Eike Rathke <erack@redhat.com> - 91.12.0-1b�?�- Update to 91.12.0 build1O�NaA�Eike Rathke <erack@redhat.com> - 91.11.0-2b�U�- Update to 91.11.0 build2O�MaA�Eike Rathke <erack@redhat.com> - 91.11.0-1b���- Update to 91.11.0 build1O�LaA�Eike Rathke <erack@redhat.com> - 91.10.0-1b��- Update to 91.10.0 build1 ] �b��$�~8 � � ] L�b]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�aG?�Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�`Y5�Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�_Y1�Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q�^_G�Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�]aA�Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1Y�\aU�Eike Rathke <erack@redhat.com> - 78.11.0-3`��- Update to 78.11.0 build2 (release)f�[ao�Eike Rathke <erack@redhat.com> - 78.11.0-2`���- Fix rhel_minor_version for dist .el8_4 and .el8v�Z]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�Y]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�X]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1 N �8��L�q" � N X�m]W�Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�l]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�k]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�j]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�iG?�Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�hY5�Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�gY1�Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q�f_G�Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�eaA�Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1v�d]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�c]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1 e �r+��V��: � � e D� � 34f10adeaa6be7f713c3b688736291759f254661968bf607fab161503364705fD� � 48c754619fa5b6636c02b2b5d79f0529027a96e638760d84ff74df57ece87bd2D� � 5a169173d476ff530595d0ae6b03d7f7fba5bf999d95a008a477896efb71218dD� � 0b48a1dc6bd965ac5f800c44cf498da51c5fd0ec07bf16a07911d66f89932c4bD� � 078df219eb34b52cef5f93c17533da34f2eceaec30e85da8944716d38dfee196D� � 61eb1f5291daee31b9568e4897e13e2fa0260d850c62490f336ee5f55b31703bD� � f9138cc0c8bd84737691daa9f6f8f6914ee52bef60ec7862c2921c8d8743faa7D� � 42e22ddc4f5145c86fda06a008ba1415e8c40c3caa32ca21f81ce460fa3e2bf5D� � d84e36f29bdfc3258ea945056512bc5478db08e97bee521c8debc13bb0e514b1D� � 903e1d0ede27725fa4cc5c201b48de10f5cbd5f90594a9cb1c3a7e06037b2fe0D� � 8c0eff6015d46baf10cb337069eb8d7100741d665dddd559e9e053509293cad7D� � 6d5b1649b1e98557b5173af9108f9a86fc71dcf1bec82baed2b16dc82c6491d4D� � 91c597c3c15155bea7576d423bb897ce5644669e24f2b918fb694fe845700c49 " �^ �|8��! � v " Q�y_G�Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssM�x_?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�w]W�Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�v]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�u]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�t]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�sG?�Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�rY5�Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�qY1�Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q�p_G�Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssO�oaA�Eike Rathke <erack@redhat.com> - 78.12.0-1`�@- Update to 78.12.0 build1M�n_?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1 : �r.���l � � : E�Y5�Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�Y1�Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8Q�_G�Jan Horak <jhorak@redhat.com> - 78.12.0-2`�t�- Rebuild to pickup older nssM�_?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�_?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X� ]W�Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�~]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�}]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�|G?�Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�{Y5�Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�zY1�Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8 : �m �J��d � � : L�]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�G?�Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�Y5�Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC� Y1�Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8M� _?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M� _?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X� ]W�Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v� ]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�G?�Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1 S �,��<��j � S v� ]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1A�G?�Jan Horak <jhorak@redhat.com>a��- Update to 91.0.1 build1E�Y5�Jan Horak <jhorak@redhat.com> - 91.0-1aj@- Update to 91.0 ESRC�Y1�Jan Horak <jhorak@redhat.com> - 91.0-1a�@- Update to 91.0b8M�_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1M�_?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�_?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�]W�Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503 C �U�f�C � � C ]�']a�Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�&_?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�%_?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�$]W�Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�#]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�"]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�!]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1M� _?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1M� _?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M� _?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X� ]W�Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled. c �%��7�c � c ]�1]a�Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�0_?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�/_?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1X�.]W�Jan Horak <jhorak@redhat.com> - 91.2.0-5aqV@- Fixed crashes when FIPS is enabled.v�-]��Jan Horak <jhorak@redhat.com> - 91.2.0-4aZ�- Disable webrender on the s390x due to wrong colors: rhbz#2009503L�,]?�Jan Horak <jhorak@redhat.com> - 91.2.0-3aTU@- Update to 91.2.0 build1L�+]?�Jan Horak <jhorak@redhat.com> - 91.1.0-1aA�@- Update to 91.1.0 build1M�*_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��)]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�(_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1 � �%��5�� � � M�:_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��9]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�8_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�7]a�Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�6_?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�5_?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1M�4_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��3]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�2_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1 n �J��J � o M�D_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��C]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�B_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�A]a�Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�@_?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�?_?�Eike Rathke <erack@redhat.com> - 91.3.0-1a�- Update to 91.3.0 build1M�>_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �=]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�<_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��;]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 o n �J��J � o M�M_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��L]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�K_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�J]a�Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�I_?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1M�H_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �G]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�F_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��E]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 & n �J�Q v & M�W_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��V]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�U_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�T]a�Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.M�S_?�Eike Rathke <erack@redhat.com> - 91.4.0-1a�c�- Update to 91.4.0 build1F�R_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�Q_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �P]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�O_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��N]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 v n �J�Q � v M�`_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��_]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�^_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�]]a�Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.F�\_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�[_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �Z]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�Y_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��X]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 - n �J�X } - M�j_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��i]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�h_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1]�g]a�Jan Horak <jhorak@redhat.com> - 91.4.0-2a�5�- Added fix for failing addons signatures.F�f_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�e_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�d_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �c]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�b_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��a]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 e �r+��V��: � � e D�$ � ac621916b414525cdb8e9a02b622a0b85c0f539979311abe60541cc0da534032D�# � 0e230546571aa26c06f1097967584ab4b9e777e7ca6c94d45f8706a36bdccc22D�" � 4706b7d5da4cf50b5e9a1e2b512bf1746aac5d7ff7525f047e6a79a392d7f548D�! � c515fb742f9fbf6e205c91df3d75b991bc0e87b359f64d944d2e6930b0b37ce8D� � 36e338a02697b1f86cb751a4d30e96bbb9a01a424dfe6f050474e28f832d3b2dD� � 5c481b40303686e7be3e1c4fb48c29d0e1c8d41c8eec46b55771c7970af95954D� � a2b22dc88f61d0fa6de4fcb62e090f383e630fc264c56ad005c9c508b1c0fcb2D� � d247f05fd2f22a9dc59679f6c668b92c75b8f5beb481c99983a0b6d26d10bb08D� � 2ba8ed563d8e7d31e393c915f3705b7c8c4c991ca337616916c90e4a14049411D� � e65c76e2da0feca843e2f481d8447767d71a1f723ceeca4f9720896b896a6e7eD� � a40300c549d06a08cce3881d68a82db4bbd0d600667f58fd2017f98bd033fa4eD� � e3fe1238b3aefa061d1f4c2e420e93639cafe3a21ce171d5f4a80fbe6aa7e555D� � c448f7707d3e7d90b0f7376b9e91d551448d8304a6b162d474c8cf243b7f11e5 � n �J�h � � M�s_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��r]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�q_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1F�p_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�o_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�n_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �m]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�l_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��k]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 > n �J�i � > M�}_?�Eike Rathke <erack@redhat.com> - 91.6.0-1a�rA- Update to 91.6.0 build1��|]�3�Jan Horak <jhorak@redhat.com> - 91.5.0-2a�r@- Use default update channel to fix non working enterprise policies: rhbz#2044667M�{_?�Eike Rathke <erack@redhat.com> - 91.5.0-1a��- Update to 91.5.0 build1L�z]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�y_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�x_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�w_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� �v]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�u_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��t]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 ) n �J�i ) �<�a��Eric Garver <egarver@redhat.com> - 0.6.3-3]>�- backport recent upstream stable fixes - backport fix --remove-rules deleting all direct rules - backport fix unable to delete rich rule forward-port - backport fix forward-port for external zone hijacking internal zone - backport fix testsuite iptables lockingL�]?�Jan Horak <jhorak@redhat.com> - 91.9.1-1b���- Update to 91.9.1 build1F�_1�Eike Rathke <erack@redhat.com> - 91.9.0-1bg�- Update to 91.9.0F�_1�Eike Rathke <erack@redhat.com> - 91.8.0-1bL/@- Update to 91.8.0M�_?�Eike Rathke <erack@redhat.com> - 91.7.0-3b%�- Update to 91.7.0 build3� � ]�%�Jan Horak <jhorak@redhat.com> - 91.7.0-2b \@- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315M�_?�Eike Rathke <erack@redhat.com> - 91.7.0-1b �- Update to 91.7.0 build2��~]�A�Jan Horak <jhorak@redhat.com> - 91.6.0-2b�- Install langpacks to the browser/extensions to make them available in UI: rhbz#2030190 �$�@�o � } `�ca�Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa� cc�Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� � c�3�Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh� as�Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec� ai�Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall� a{�Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�a��Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�ak�Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�a��Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name �$�@�o � } `�ca�Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�cc�Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �c�3�Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�as�Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�ai�Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�a{�Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�a��Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�ak�Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�a��Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name ) �O�s � � ) c� ai�Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall� a{�Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r� a��Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�ak�Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�a��Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name�<�a��Eric Garver <egarver@redhat.com> - 0.6.3-3]>�- backport recent upstream stable fixes - backport fix --remove-rules deleting all direct rules - backport fix unable to delete rich rule forward-port - backport fix forward-port for external zone hijacking internal zone - backport fix testsuite iptables lockingn�c}�Eric Garver <egarver@redhat.com> - 0.6.3-13`x*�- doc: clarify --set-target values "default" vs "reject" ��@�d � � c�'ai�Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�&a{�Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�%a��Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�$ak�Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�#a��Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name`�"ca�Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�!cc�Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� � c�3�Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh� as�Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zone ��@� � r�.a��Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name�<�-a��Eric Garver <egarver@redhat.com> - 0.6.3-3]>�- backport recent upstream stable fixes - backport fix --remove-rules deleting all direct rules - backport fix unable to delete rich rule forward-port - backport fix forward-port for external zone hijacking internal zone - backport fix testsuite iptables lockingn�,c}�Eric Garver <egarver@redhat.com> - 0.6.3-13`x*�- doc: clarify --set-target values "default" vs "reject"`�+ca�Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�*cc�Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �)c�3�Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�(as�Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zone �$�O�V � � r�7a��Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name`�6ca�Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�5cc�Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �4c�3�Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�3as�Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�2ai�Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�1a{�Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�0a��Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�/ak�Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-config �$�O�V � � n�@c}�Eric Garver <egarver@redhat.com> - 0.6.3-13`x*�- doc: clarify --set-target values "default" vs "reject"`�?ca�Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�>cc�Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �=c�3�Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square bracketsh�<as�Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�;ai�Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�:a{�Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�9a��Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�8ak�Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-config / �K�o � / h�Gas�Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�Fai�Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�Ea{�Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�Da��Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�Cak�Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�Ba��Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name�<�Aa��Eric Garver <egarver@redhat.com> - 0.6.3-3]>�- backport recent upstream stable fixes - backport fix --remove-rules deleting all direct rules - backport fix unable to delete rich rule forward-port - backport fix forward-port for external zone hijacking internal zone - backport fix testsuite iptables locking r�6�Z � � h�Pas�Eric Garver <egarver@redhat.com> - 0.6.3-9^9\�- fix: firewalld not falling back to interface zonec�Oai�Eric Garver <egarver@redhat.com> - 0.6.3-8]�X�- fix: failure to load modules no longer fatall�Na{�Eric Garver <egarver@redhat.com> - 0.6.3-7]���- fix: Revert "ebtables: drop support for broute table"r�Ma��Eric Garver <egarver@redhat.com> - 0.6.3-6]nU�- fix: direct: removeRules() not removing all rules in chaind�Lak�Eric Garver <egarver@redhat.com> - 0.6.3-5]QT�- doc: add --default-config and --system-configr�Ka��Eric Garver <egarver@redhat.com> - 0.6.3-4]QT�- fix: guarantee zone source dispatch is sorted by zone name`�Jca�Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�Icc�Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �Hc�3�Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square brackets f r�:��' � f a�Y[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�X[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�W[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�VcE�Kalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�UcE�Kalev Lember <klember@redhat.com> - 1.0.1-1[���- Update to 1.0.1 (#1570030)n�Tc}�Eric Garver <egarver@redhat.com> - 0.6.3-13`x*�- doc: clarify --set-target values "default" vs "reject"`�Sca�Eric Garver <egarver@redhat.com> - 0.6.3-12_Wr@- fix(zone): cache rule_str for rich rulesa�Rcc�Eric Garver <egarver@redhat.com> - 0.6.3-11^��@- feat(service): add RH-Satellite-6-Capsule� �Qc�3�Eric Garver <egarver@redhat.com> - 0.6.3-10^��- fix: add logrotate policy - fix: checkIP6: strip leading/trailing square brackets V �J��0�r � V X�c[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�b[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�a[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�`[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�_cE�Kalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�^]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�]c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�\cE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�[[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�Z[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435) V �P��6�p � V X�m[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�l[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�k[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�j[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�i[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�h]K�David King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�g]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�fc{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�ecE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�d[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652) e �r+��V��: � � e D�1 � 4b031b0a3b505796cae1f7221a96821c6c953c4e2f94f8869bfc2a6139af8b2aD�0 � cddc3744f22b625662ab15986f90fc202f14ece03ac5fce4fbde2d656b5f38ddD�/ � 5cd33852a9e9061d05228552a9fa6fe6b3b0667fc738828b9df7e633dbe46bd5D�. � ddd64d000d677447dbb3a66637d5f9d9064439fbdd584fdad1f5aea0b47ef550D�- � e251fe0d7ffbb8b51c6644310756c5ea0a0ea8d5282cb0ecda819c8ff161dfecD�, � 6a5560cf575ee9bfa9cac85044e94e3bce3ea85e26431c99e41877289cf82b64D�+ � c3bdafdc7b5df1eae10ff90840698573957b8409268bf2a94cf0a31564d3658cD�* � 1979501bae62e6070c0c6037b5547a69c4342485df1f9dd821ad18a174b0bd48D�) � 85ac0468355fd6847c79849e947fd3b5d88f606ad3aa6fd06cb4aca3fe3c9fc8D�( � 91d045022efb0cd2e147b359f329cbd083f5efa2e778b5a35adf22874dba15e2D�' � aeadded2fd899332eca7c3d0d69c10f06ba09b988bbb0be751dfc6ea05b1a753D�& � 724795eec6065da1df593d22a6a359fc5b241aec5a3916cbec646ff78f2196baD�% � 84fb40705d6f0704a0543373e2e266ea3565b3125d70e1cf4d3a2ef8497670a0 _ �;��3�� � _ a�w[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�v[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�u[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�tcE�Kalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�scE�Kalev Lember <klember@redhat.com> - 1.0.1-1[���- Update to 1.0.1 (#1570030)[�roK�Debarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�q]K�David King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�p]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�oc{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�ncE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591) V �J��0�r � V X�[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a� [k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�~[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�}cE�Kalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�|]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�{c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�zcE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�y[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�x[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435) V �P��6�p � V X� [Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X� [Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a� [k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�]K�David King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�cE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652) _ �;��3�� � _ a�[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�cE�Kalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�cE�Kalev Lember <klember@redhat.com> - 1.0.1-1[���- Update to 1.0.1 (#1570030)[�oK�Debarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�]K�David King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m� c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R� cE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591) V �J��0�r � V X� [Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a� [k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z� []�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f� [u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�cE�Kalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�cE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435) V �P��6�p � V X�)[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�([Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�'[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�&[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�%[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�$]K�David King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�#]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�"c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�!cE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X� [Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652) _ �;��3�� � _ a�3[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�2[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�1[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�0cE�Kalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�/cE�Kalev Lember <klember@redhat.com> - 1.0.1-1[���- Update to 1.0.1 (#1570030)[�.oK�Debarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�-]K�David King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�,]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�+c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�*cE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591) V �J��0�r � V X�=[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�<[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�;[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�:[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�9cE�Kalev Lember <klember@redhat.com> - 1.0.2-2[�Q@- Update to 1.0.2 (#1570030)R�8]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�7c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�6cE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�5[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�4[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435) V �P��6�p � V X�G[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652)X�F[Y�David King <dking@redhat.com> - 1.0.2-6\f��- Tweak /proc sandbox patch (#1675435)a�E[k�David King <dking@redhat.com> - 1.0.2-5\d�- Do not mount /proc in root sandbox (#1675435)Z�D[]�David King <dking@redhat.com> - 1.0.2-4\<y�- Apply the OCI support patch (#1660137)f�C[u�David King <dking@redhat.com> - 1.0.2-3\3?@- Backport patches to improve OCI support (#1660137)R�B]K�David King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�A]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�@c{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�?cE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591)X�>[Y�David King <dking@redhat.com> - 1.0.2-7\��@- Fix IOCSTI sandbox bypass (#1700652) 1 �;��3�y � 1 M�Q_?�Daniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��P���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�OY_�Adam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�NY��Adam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�MY-�Adam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR[�LoK�Debarshi Ray <rishi@fedoraproject.org> - 1.0.9-12ay?@- Fix CVE-2021-41133 (#2012864)R�K]K�David King <dking@redhat.com> - 1.0.9-11`X��- Fix CVE-2021-21381 (#1938059)R�J]K�David King <dking@redhat.com> - 1.0.9-10`@- Fix CVE-2021-21261 (#1918771)m�Ic{�Kalev Lember <klember@redhat.com> - 1.0.9-9^1s�- Backport OCI fixes from upstream - Resolves: #1796340R�HcE�Kalev Lember <klember@redhat.com> - 1.0.9-8]��@- Update to 1.0.9 (#1753591) �F�K�� � ��Z���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�YY_�Adam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�XY��Adam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�WY-�Adam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�Vc��Jan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��Uc�M�Jan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�Tc[�Jan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�S_?�Daniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�Rco�Petr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7 f �F���}9 � f Z�cY_�Adam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�bY��Adam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�aY-�Adam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�`c��Jan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��_c�M�Jan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�^c[�Jan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�]_?�Daniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�\co�Petr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�[_?�Daniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27 ( e�[�` � � ( s�lY��Adam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�kY-�Adam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�jc��Jan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��ic�M�Jan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�hc[�Jan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�g_?�Daniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�fco�Petr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�e_?�Daniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��d���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild e �r+��V��: � � e D�> � 564e997b9c790bd2ccb1bc895a8ace373c5af426e771063ebc24eb3ac892b979D�= � b06da13bab5aee0690c6d98073ecafe702d73f53e8e1b9421e90fe7928ba1d17D�< � 1ca99a830f21e3f243a3f20099285c28e83738059736b8931da396f1b77e1b0aD�; � b884e513e4fabc67d102225daf07a6948f3c7aba4eea99292cf5bbaa993d41e7D�: � 5496c1582c68c5314603d320dbb44e5435532564f1a4c6068e8040f2767a1797D�9 � 7b4f34148e411ba03bffe54c35102df45b1e78e1ed461d8ba62a118f517e96d9D�8 � a4f2dc5f488dc7bd53211931528d9c122391fbf1997e99e33a04a33c38c67995D�7 � f44cd6beef0e0285e87ceddb589f3ce6b36f4340a280ed674cc37aa7141b8397D�6 � ef82a93c26a7db64bb635cb373e0bf00ab1038b8e42c02b37a970cc41e97ef34D�5 � c2b79101f730ccfa892ffdfdb7ce4d806f9960bc302581dc10991c7321dd4e24D�4 � 1e843fde687553231eecf687163be424f4d2df8b4398e28a34c6dff791e1b161D�3 � f61c338504f42e88dbef95a448e0e1aa1c04a89586134610472f384c31966981D�2 � 7ea68138245e021dc4dbaf9e1b990e5250e1b72ebca41352896a1b5dbceda2fb A ��N�� � A A�uY-�Adam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�tc��Jan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��sc�M�Jan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�rc[�Jan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�q_?�Daniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�pco�Petr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�o_?�Daniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��n���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�mY_�Adam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drop � �-�B��( � ��}c�M�Jan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�|c[�Jan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�{_?�Daniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�zco�Petr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�y_?�Daniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27��x���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�wY_�Adam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops�vY��Adam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026) f �>�k�� � f ]�c[�Jan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora)M�_?�Daniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�co�Petr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M�_?�Daniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27�����Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ�Y_�Adam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops� Y��Adam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A�Y-�Adam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�~c��Jan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819 + e��-�5 � { + M�_?�Daniel Mach <dmach@redhat.com> - 1.3.0-13R�U�- Mass rebuild 2014-01-24g�co�Petr Hracek <phracek@redhat.com> - 1.3.0-12R��@- Resolves: #1048857 fltk does not build on RHEL7M� _?�Daniel Mach <dmach@redhat.com> - 1.3.0-11R�k�- Mass rebuild 2013-12-27�� ���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-10Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildZ� Y_�Adam Tkac <atkac redhat com> - 1.3.0-9P�9@- rebuild due to "jpeg8-ABI" feature drops� Y��Adam Tkac <atkac redhat com> - 1.3.0-8P��- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)A� Y-�Adam Tkac <atkac redhat com> - 1.3.0-7P�N@- add xcursor BR{�c��Jan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��c�M�Jan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482 7 ��F�K � � 7 L�]?�Daniel Mach <dmach@redhat.com> - 4.0.9-6R�U�- Mass rebuild 2014-01-24L�]?�Daniel Mach <dmach@redhat.com> - 4.0.9-5R�k�- Mass rebuild 2013-12-27s�e��Jiri Popelka <jpopelka@redhat.com> - 4.0.9-4R���- Correct Obsoletes/Provides printer-filters (bug #1035450)|�[� �Tim Waugh <twaugh@redhat.com> - 4.0.9-3Q��@- Obsolete/provide printer-filters package now it has gone (bug #967316).y�k� �Tom Callaway <spot@fedoraproject.org> - 4.0.9-2Q��@- remove Artistic test scripts from source tarball (bz 967406)>�e�Jiri Popelka <jpopelka@redhat.com> - 4.0.9-1Q?�- 4.0.9{�c��Jan Grulich <jgrulich@redhat.com> - 1.3.4-3b��- Fix segfault if using very large selections Resolves: bz#1999819��c�M�Jan Grulich <jgrulich@redhat.com> - 1.3.4-2^Nt�- Do not drop linker flags for main library when --use-xxx option is used Resolves: bz#1510482]�c[�Jan Grulich <jgrulich@redhat.com> - 1.3.4-1X�}@- Re-base to 1.3.4 (+ sync with Fedora) * �:�+�n � y * L�!]?�Daniel Mach <dmach@redhat.com> - 4.0.9-5R�k�- Mass rebuild 2013-12-27s� e��Jiri Popelka <jpopelka@redhat.com> - 4.0.9-4R���- Correct Obsoletes/Provides printer-filters (bug #1035450)|� [� �Tim Waugh <twaugh@redhat.com> - 4.0.9-3Q��@- Obsolete/provide printer-filters package now it has gone (bug #967316).y� k� �Tom Callaway <spot@fedoraproject.org> - 4.0.9-2Q��@- remove Artistic test scripts from source tarball (bz 967406)>� e�Jiri Popelka <jpopelka@redhat.com> - 4.0.9-1Q?�- 4.0.9�� g�)�Zdenek Dohnal <zdohnal@redhat.com> - 4.0.9-10_� �- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files� �e� �Zdenek Dohnal <zdohnal@redhat.com> - 4.0.9-9\�@- 1707559 - removal of option in ghostscript caused foomatic-rip to failk�[�Tim Waugh <twaugh@redhat.com> - 4.0.9-8S��- Put some text into foomatic-preferred-drivers man page.U�[S�Tim Waugh <twaugh@redhat.com> - 4.0.9-7S��@- Ship more manpages (bug #948965). F �Y�g�[ � F W�*eM�Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�)_c�Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�(_Q�Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�'_� �Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��&g�)�Zdenek Dohnal <zdohnal@redhat.com> - 4.0.9-10_� �- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files� �%e� �Zdenek Dohnal <zdohnal@redhat.com> - 4.0.9-9\�@- 1707559 - removal of option in ghostscript caused foomatic-rip to failk�$[�Tim Waugh <twaugh@redhat.com> - 4.0.9-8S��- Put some text into foomatic-preferred-drivers man page.U�#[S�Tim Waugh <twaugh@redhat.com> - 4.0.9-7S��@- Ship more manpages (bug #948965).L�"]?�Daniel Mach <dmach@redhat.com> - 4.0.9-6R�U�- Mass rebuild 2014-01-24 B ��D�[ � B ~�1_� �Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��0g�C�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf�/gi�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�.g��Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�-]E�Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�,e��Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g�+em�Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199) F �E���/ � F f�9gi�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�8g��Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�7]E�Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�6e��Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g�5em�Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�4eM�Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�3_c�Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�2_Q�Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811) h h��,�h h �|�@e��Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g�?em�Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�>eM�Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�=_c�Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�<_Q�Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�;_� �Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��:g�C�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscan - �.�-�S � � - g�Iem�Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�HeM�Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�G_c�Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041)V�F_Q�Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�E_� �Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��Dg�C�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf�Cgi�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�Bg��Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�A]E�Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286) S �.�- � S V�P_Q�Ondrej Holy <oholy@redhat.com> - 1.0.2-14Z�@- Add FIPS mode support (#1363811)~�O_� �Ondrej Holy <oholy@redhat.com> - 1.0.2-13Y� �- Fix NTLM on big endian (#1204742) - Fix colors on big endian (#1308810)��Ng�C�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscanf�Mgi�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�Lg��Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�K]E�Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�Je��Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623) � �D��� � f�Wgi�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-4a�@- Refactored RPC gateway parser (rhbz#2017944)}�Vg��Felipe Borges <feborges@redhat.com> - 2.1.1-3a� �- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)O�U]E�Ondrej Holy <oholy@redhat.com> - 2.1.1-2^˳@- Update to 2.1.1 (#1834286)�|�Te��Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4^��- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621) - CVE-2020-11523: Fix integer overflow in region.c (#1837622) - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)g�Sem�Ondrej Holy <oholy@redhat.com> - 2.0.0-2.rc4^��@- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)W�ReM�Ondrej Holy <oholy@redhat.com> - 2.0.0-1.rc4\mA@- Update to 2.0.0-rc4 (#1291254)_�Q_c�Ondrej Holy <oholy@redhat.com> - 1.0.2-15Zq��- Fix smartcard usage in manpage (#1428041) y h�P�V � y |�^]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�]eU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�\c{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141��[c�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�Zc��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141��Yc�M�Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��Xg�C�Jan Grulich <jgrulich@redhat.com> - 2:2.2.0-5a�b�- Update: Refactored RPC gateway parser (rhbz#2017944) + fix issues discovered by Covscan i �� p � i ��ec�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�dc��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141��cc�M�Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��bm�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�a]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��`]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�_]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504 # �2�L�U � # ��mc�M�Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��lm�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�k]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��j]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�i]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|�h]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�geU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�fc{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141 e �r+��V��: � � e D�K � d0b3530450134364f48fc2529fb28b6ba4924562e2743be8a4a9531df24ce934D�J � d9df089dfd6da09a0d335f5f7217eb49fb786af4bc6bdc86f8f5780e9588cb54D�I � aa4d5c25ee0ab0c6200041d7babcc2186123b17af2126662b27bed0013787faaD�H � eba7c5a667e7db88684d709d6c7106aa972e55a41d27a79736afb8d0eec1de6dD�G � a4c7433fc835c54d8bf366a26b4dc41534ab33b1bd9437ea1ba37c1150958611D�F � 3e01c37b17dac632211d855274ca843a3926cde218387315d5124f7b90008656D�E � 8c0250c573335738373e9064ccc227bb57bf3a3ce5d859aa2fe9f129bbc28592D�D � d2c7c9daa4378bb677e4fa893b6839ebef8009ea1e132569083c4a845ec60a22D�C � 779af39181edc4bdb4e091b266ec46176447a4ccc0941c928f999ed3fa780cacD�B � bb549c96d2986def32a70c8f766e2a23ac2dd2f4c76e72e116fdc699bd0c6eb9D�A � 5dfc9505dc8c10ee2fa6b344d1a86a8ea57d43b15353225888d1f9888a840220D�@ � 8c8b857999a32f70ec103af37b684d4c2eb482a3f8d75f62cec86acb6c10e940D�? � 530c5e0227cf705a60da80a809db414020ef88b26923ed6828fe285d4f1b5e18 N ���+�E � N j�u]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��t]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�s]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|�r]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�qeU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�pc{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141��oc�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�nc��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141 z i�Q�W � z |�|]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�{eU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�zc{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141��yc�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�xc��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141��wc�M�Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268��vm�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635 i �� p � i ��c�+�Marek Kasik <mkasik@redhat.com> - 2.4.11-14X��@- Backport functions for reading signed values from stream - Resolves: #1381678z�c��Marek Kasik <mkasik@redhat.com> - 2.4.11-13X��- Don't show path of non-existing libtool file - Resolves: #1368141��c�M�Marek Kasik <mkasik@redhat.com> - 2.4.11-12V�3�- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31 - Resolves: #1303268�� m�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j�]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��~]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�}]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504 " �2�L�U � " �� � ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild�� m�;�Marek Kasik <mkasik@redhat.com> - 2.8-14.el7_9.1_� @- Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891635j� ]{�Marek Kasik <mkasik@redhat.com> - 2.8-14\�M�- Fix rendering in monochrome mode - Resolves: #1657479��]�1�Marek Kasik <mkasik@redhat.com> - 2.8-13[�- Fix definition of constant ft_encoding_gb2312 in freetype.h - Resolves: #1645218d�]o�Marek Kasik <mkasik@redhat.com> - 2.8-12[o�- Fix loading of avar tables - Resolves: #1576504|�]� �Marek Kasik <mkasik@redhat.com> - 2.8-11[ @- Preserve API/ABI compatibility for public symbols - Resolves: #1576504[�eU�Richard Hughes <rhughes@redhat.com> - 2.8-10[�- Update to 2.8 - Resolves: #1576504m�c{�Marek Kasik <mkasik@redhat.com> - 2.4.11-15X��A- Fix shellcheck warning (coverity) - Related: #1368141 V��b � � �e�]�Filip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8N�a?�Daniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�a?�Daniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27L�c9�Honza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�cI�Honza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity��� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\�]_�Adam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP� ]G�Adam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&� c�k�Honza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs $ d�gl � u $ N� a?�Daniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N� a?�Daniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27L�c9�Honza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�cI�Honza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity��� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\�]_�Adam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP�]G�Adam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&�c�k�Honza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs��� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild " \��d � q " L�%c9�Honza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�$cI�Honza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity��#� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\�"]_�Adam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP�!]G�Adam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&� c�k�Honza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs�� � ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� � e�]�Filip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8 & �^� t! � & ��-� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild\�,]_�Adam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP�+]G�Adam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&�*c�k�Honza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs��)� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� �(e�]�Filip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8N�'a?�Daniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�&a?�Daniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27 �Z �x � { \�6]_�Adam Tkac <atkac redhat com> - 2.0.35-21P�9@- rebuild due to "jpeg8-ABI" feature dropP�5]G�Adam Tkac <atkac redhat com> - 2.0.35-20P�O@- rebuild against new libjpeg�&�4c�k�Honza Horak <hhorak@redhat.com> - 2.0.35-19P<��- Spec file cleanup - Compile and run test suite during build - Using chrpath to get rid of --rpath in gd-progs��3� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-18P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� �2e�]�Filip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8N�1a?�Daniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�0a?�Daniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27L�/c9�Honza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�.cI�Honza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity ! d �m x � ! {�?c��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�>_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�=c��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143� �<e�]�Filip Januš <fjanus@redhat.com> - 2.0.35-27_���- Fix CVE-2016-5766 - Resolves: #1356813 - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8N�;a?�Daniel Mach <dmach@redhat.com> - 2.0.35-26R�U�- Mass rebuild 2014-01-24N�:a?�Daniel Mach <dmach@redhat.com> - 2.0.35-25R�k�- Mass rebuild 2013-12-27L�9c9�Honza Horak <hhorak@redhat.com> - 2.0.35-24QP<A- Fix build on aarch64T�8cI�Honza Horak <hhorak@redhat.com> - 2.0.35-23QP<@- Fix issues found by Coverity��7� ��Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-22Q�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild t �'�3�R � t s�Gc��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�Fck�Ray Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�Ec��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�D_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�Cc��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�Bc��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�A_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�@c��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143 � � �A�` � � `�O_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�Nc��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�Mc��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�L_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�Kc��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�Jck�Ray Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�Ic��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�H_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583 e �r+��V��: � � e D�X � 3b2af1cbe29d541a936e2a76af8f1cc07780ea069f8cc04404f4b2f85184abfcD�W � b3306affa940e0e2ab3cd9caec8dda837e626fe8043ec669f8465d62b7b08ed5D�V � c0c2b524cce50372b06ea8c7a4618f02d379ce6a9cbf9b2a7bbd6e21c4a80dd7D�U � 666bdeb5237f9bac4020a4b5da35bdc2b27ec3fe6d28b4e3823d1ad165c013b5D�T � 73e2cf9bb12255322e5252ec0b918e3e62d5c6df5b610dd7d2ecf351b34f1365D�S � 0f6e2c2f22024dd4f9db5cb729bdd2f2744882ba37e965a50b954f861c99243bD�R � 9b205c9658e9caf5ecd6d928179b7e7b36aa629b18e33540805f21a0d0b9f939D�Q � 570aef75009a72d1f785eeeb0cf1e9b1c5113c73c46a3a7c2eebe0f87a44655bD�P � bb408fa95bcf415eb2f22a47b9881db4b7939785d83fa16655c8dc2709c0e454D�O � 076ae5a31f58ce2e33f04de674fed5086fd8f72a8e802528d833f3033c017469D�N � 9a97f6e2d20a2e98ad20844706c47bf2fc689c6975c67067aa46d4ab03c1e47aD�M � b3523f6bd479abca1bc4c70f870af2423e9747ad2cb185692334588138742f50D�L � 0debd7af9974202b568d8b8c1c87e8d70139dd2dbc62ba9bf7a9e72fe64c3990 l � �+�M � l {�Wc��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�V_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�Uc��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�Tck�Ray Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�Sc��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�R_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�Qc��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�Pc��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821 t �"�A�h � t s�_c��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�^c��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�]_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�\c��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143{�[c��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�Z_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�Yc��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�Xck�Ray Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063 � � �A�` � e�fck�Ray Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�ec��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�d_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583s�cc��Ray Strode <rstrode@redhat.com> - 3.28.2-23^���- Support exotic keyboard layouts better Related: #1734143e�bck�Ray Strode <rstrode@redhat.com> - 3.28.2-26_�#�- Fix warning during unlock Related: #1897063{�ac��Ray Strode <rstrode@redhat.com> - 3.28.2-25_m�- Backport some libgdm leak fixes from upstream Resolves: #1882821`�`_e�Ray Strode <rstrode@redhat.com> 3.28.2-24_cO�- Fix FD leak on logout Resolves: #1877583 l x�x � l M�n_?�Daniel Mach <dmach@redhat.com> - 0.2.0-18R�U�- Mass rebuild 2014-01-24M�m_?�Daniel Mach <dmach@redhat.com> - 0.2.0-17R�k�- Mass rebuild 2013-12-27i�leq�Nils Philippsen <nils@redhat.com> - 0.2.0-16R�@- remove BR: w3m, it's only needed for "make dist"M�ko/�Rex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R��- rebuild (exiv2)O�jo3�Rex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R��- rebuild (openexr)[�ikO�Kalev Lember <kalevlember@gmail.com> - 0.2.0-13R1��- Rebuilt for ilmbase soname bump��h���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�i�ge�o�Nils Philippsen <nils@redhat.com> - 0.2.0-11Q�o@- replace lua-5.2 patch by upstream commit - fix buffer overflow in and add plausibility checks to ppm-load op (CVE-2012-4433) - fix multi-lib issue in generated documentation [ �Ob�i � [ i�veq�Nils Philippsen <nils@redhat.com> - 0.2.0-16R�@- remove BR: w3m, it's only needed for "make dist"M�uo/�Rex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R��- rebuild (exiv2)O�to3�Rex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R��- rebuild (openexr)[�skO�Kalev Lember <kalevlember@gmail.com> - 0.2.0-13R1��- Rebuilt for ilmbase soname bump��r���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�i�qe�o�Nils Philippsen <nils@redhat.com> - 0.2.0-11Q�o@- replace lua-5.2 patch by upstream commit - fix buffer overflow in and add plausibility checks to ppm-load op (CVE-2012-4433) - fix multi-lib issue in generated documentationV�peK�Josef Ridky <jridky@redhat.com> - 0.2.0-19.1a�q@- fix CVE-2021-45463 (#2035416)U�oaM�Josef Ridky <jridky@redhat.com> - 0.2.0-19X@�- add Requires: dcraw (#1279144) ' �`��' � w ' M�o/�Rex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R��- rebuild (exiv2)O�~o3�Rex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R��- rebuild (openexr)[�}kO�Kalev Lember <kalevlember@gmail.com> - 0.2.0-13R1��- Rebuilt for ilmbase soname bump��|���Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�i�{e�o�Nils Philippsen <nils@redhat.com> - 0.2.0-11Q�o@- replace lua-5.2 patch by upstream commit - fix buffer overflow in and add plausibility checks to ppm-load op (CVE-2012-4433) - fix multi-lib issue in generated documentationV�zeK�Josef Ridky <jridky@redhat.com> - 0.2.0-19.1a�q@- fix CVE-2021-45463 (#2035416)U�yaM�Josef Ridky <jridky@redhat.com> - 0.2.0-19X@�- add Requires: dcraw (#1279144)M�x_?�Daniel Mach <dmach@redhat.com> - 0.2.0-18R�U�- Mass rebuild 2014-01-24M�w_?�Daniel Mach <dmach@redhat.com> - 0.2.0-17R�k�- Mass rebuild 2013-12-27 ] �D��CV � ] [�kO�Kalev Lember <kalevlember@gmail.com> - 0.2.0-13R1��- Rebuilt for ilmbase soname bump�����Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0-12Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild�i�e�o�Nils Philippsen <nils@redhat.com> - 0.2.0-11Q�o@- replace lua-5.2 patch by upstream commit - fix buffer overflow in and add plausibility checks to ppm-load op (CVE-2012-4433) - fix multi-lib issue in generated documentationV�eK�Josef Ridky <jridky@redhat.com> - 0.2.0-19.1a�q@- fix CVE-2021-45463 (#2035416)U�aM�Josef Ridky <jridky@redhat.com> - 0.2.0-19X@�- add Requires: dcraw (#1279144)M�_?�Daniel Mach <dmach@redhat.com> - 0.2.0-18R�U�- Mass rebuild 2014-01-24M�_?�Daniel Mach <dmach@redhat.com> - 0.2.0-17R�k�- Mass rebuild 2013-12-27i� eq�Nils Philippsen <nils@redhat.com> - 0.2.0-16R�@- remove BR: w3m, it's only needed for "make dist" 2 �^��R�� � 2 ��� ��Fedora Release Engineering <releng@fedoraproject.org> - 2.2.2-2V��- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild�X�a�Q�Paul Howarth <paul@city-fan.org> - 2.2.2-1V��- Update to 2.2.2 - geoipupdate now calls fsync on the database directory after a rename to make it durable in the event of a crash - Update autotools patchV�eK�Josef Ridky <jridky@redhat.com> - 0.2.0-19.1a�q@- fix CVE-2021-45463 (#2035416)U� aM�Josef Ridky <jridky@redhat.com> - 0.2.0-19X@�- add Requires: dcraw (#1279144)M� _?�Daniel Mach <dmach@redhat.com> - 0.2.0-18R�U�- Mass rebuild 2014-01-24M� _?�Daniel Mach <dmach@redhat.com> - 0.2.0-17R�k�- Mass rebuild 2013-12-27i� eq�Nils Philippsen <nils@redhat.com> - 0.2.0-16R�@- remove BR: w3m, it's only needed for "make dist"M� o/�Rex Dieter <rdieter@fedoraproject.org> - 0.2.0-15R��- rebuild (exiv2)O�o3�Rex Dieter <rdieter@fedoraproject.org> - 0.2.0-14R��- rebuild (openexr) � � � ��� ��Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-2Yx�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild�'�a�o�Paul Howarth <paul@city-fan.org> - 2.4.0-1Y(�- Update to 2.4.0 - geoipupdate now checks that ��� ��Fedora Release Engineering <releng@fedoraproject.org> - 2.3.1-2X��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild�^�a�]�Paul Howarth <paul@city-fan.org> - 2.3.1-1Xn5@- Update to 2.3.1 - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or greater - Previously, on an invalid gzip file, geoipupdate would output binary data to stderr; it now displays an appropriate error message - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33) - $(sysconfdir) is now created if it doesn't exist (GH#33) - The sample config file is now usable (GH#33) the database directory is writable: if it is not, it reports the problem and aborts - geoipupdate now acquires a lock when starting up to ensure only one instance may run at a time: a new option, 'LockFile', exists to set the file to use as a lock ('.geoipupdate.lock' in the database directory by default) - geoipupdate now prints out additional information from the server when a download request results in something other than HTTP status 2xx; this provides more information when the API does not respond with a database file - ${datarootdir}/GeoIP is now created on 'make install' (GH#29) - Previously, a variable named 'ERROR' was used, which caused issues building on Windows (GH#36) - Drop EL-5 support - Drop BuildRoot: and Group: tags - Drop explicit buildroot cleaning in %install section - Drop explicit %clean section - noarch subpackages always available now - libcurl-devel always available now " d " �>�a� �Paul Howarth <paul@city-fan.org> - 2.5.0-1Y�e�- Update to 2.5.0 - Replace use of strnlen() due to lack of universal availability (GH#71) - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64) - Remove unused base64 library (GH#68) - Add the new configuration option 'PreserveFileTimes'; if set, the downloaded files will get the same modification times as their original on the server (default is '0') (GH#63) - Use the correct types when calling 'curl_easy_setopt()'; this fixes warnings generated by libcurl's 'typecheck-gcc.h' (GH#61) - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the 'ProductIds' option was renamed to 'EditionIDs'; the old options will continue to work, but upgrading to the new names is recommended for forward compatibility��� �%�Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-3Y���- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild � ��!� ��� ��Fedora Release Engineering <releng@fedoraproject.org> - 2.2.2-2V��- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild�X�a�Q�Paul Howarth <paul@city-fan.org> - 2.2.2-1V��- Update to 2.2.2 - geoipupdate now calls fsync on the database directory after a rename to make it durable in the event of a crash - Update autotools patch��i� �Michal Ruprich <mruprich@redhat.com> - 2.5.0-2dFo@- Resolves: #2188376 - Add support for hashed license keys to geoipupdatey�i� �Michal Ruprich <mruprich@redhat.com> - 2.5.0-1\]o@- Resolves: #1643470 - Add geoipupdate package - Initial commit � � � �� � ��Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-2Yx�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild�'� a�o�Paul Howarth <paul@city-fan.org> - 2.4.0-1Y(�- Update to 2.4.0 - geoipupdate now checks that �� � ��Fedora Release Engineering <releng@fedoraproject.org> - 2.3.1-2X��@- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild�^�a�]�Paul Howarth <paul@city-fan.org> - 2.3.1-1Xn5@- Update to 2.3.1 - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or greater - Previously, on an invalid gzip file, geoipupdate would output binary data to stderr; it now displays an appropriate error message - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33) - $(sysconfdir) is now created if it doesn't exist (GH#33) - The sample config file is now usable (GH#33) the database directory is writable: if it is not, it reports the problem and aborts - geoipupdate now acquires a lock when starting up to ensure only one instance may run at a time: a new option, 'LockFile', exists to set the file to use as a lock ('.geoipupdate.lock' in the database directory by default) - geoipupdate now prints out additional information from the server when a download request results in something other than HTTP status 2xx; this provides more information when the API does not respond with a database file - ${datarootdir}/GeoIP is now created on 'make install' (GH#29) - Previously, a variable named 'ERROR' was used, which caused issues building on Windows (GH#36) - Drop EL-5 support - Drop BuildRoot: and Group: tags - Drop explicit buildroot cleaning in %install section - Drop explicit %clean section - noarch subpackages always available now - libcurl-devel always available now " d " �>� a� �Paul Howarth <paul@city-fan.org> - 2.5.0-1Y�e�- Update to 2.5.0 - Replace use of strnlen() due to lack of universal availability (GH#71) - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64) - Remove unused base64 library (GH#68) - Add the new configuration option 'PreserveFileTimes'; if set, the downloaded files will get the same modification times as their original on the server (default is '0') (GH#63) - Use the correct types when calling 'curl_easy_setopt()'; this fixes warnings generated by libcurl's 'typecheck-gcc.h' (GH#61) - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the 'ProductIds' option was renamed to 'EditionIDs'; the old options will continue to work, but upgrading to the new names is recommended for forward compatibility�� � �%�Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-3Y���- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 9 ��x � 9 � �&e� �Andrew Price <anprice@redhat.com> - 3.1.10-6Z&�@- gfs2_edit: Print offsets of indirect pointers Resolves: rhbz#1518938�7�%e� �Andrew Price <anprice@redhat.com> - 3.1.10-5Y��- Update URL in spec file Resolves: rhbz#1501738 - fsck.gfs2: Make -p, -n and -y conflicting options Resolves: rhbz#1507091��$e�-�Andrew Price <anprice@redhat.com> - 3.1.10-4Y��- gfs2_edit savemeta: Fix up saving of dinodes/symlinks Resolves: rhbz#1482542�u�#e��Andrew Price <anprice@redhat.com> - 3.1.10-3X���- libgfs2: Issue one write per rgrp when creating them - mkfs.gfs2: Fix resource group alignment issue - mkfs.gfs2: Free unnecessary cached pages, disable readahead Resolves: rhbz#1440269��"i� �Michal Ruprich <mruprich@redhat.com> - 2.5.0-2dFo@- Resolves: #2188376 - Add support for hashed license keys to geoipupdatey�!i� �Michal Ruprich <mruprich@redhat.com> - 2.5.0-1\]o@- Resolves: #1643470 - Add geoipupdate package - Initial commit e �r+��V��: � � e D�e � ae71e0763354a3a81b14cb8bd4de22629e35e59b0045199ad6958323fac31e30D�d � 2f40644349b7b023a5ac1b6045dc14e19a4d5af38ffd90e8907d4b98929b12b2D�c � e07e25a4f64939f2fc2c8dfbcd0358561025cfc19d01318d054b161d02e76a80D�b � 4a1eda7aca52060e944393a7b40798a1e90bbd8b4ffcf3bdfe5779ccbe2acc43D�a � e4d4ae004f1e33c3542d967b6301d6307f9a848be51a7008ff5726259a3e5a5dD�` � a0b6efe5d9993351a08c5873bc1be89455d96a5535d9bf69e24384ab21850577D�_ � c37e4471ce6ce9e562309ca353e9b1cd0725d1ec5d073e80ad7a9ba3f32732c1D�^ � 3e669a493af1a126cce0a77eecae0864765c9b701b5640962ecfa5a8ec1afc30D�] � 36fed680eaa8454cb71901db4b5393c54c16fdfc72c0901bc461231559e164efD�\ � 48db0a9dafc6ecf4c0b955075d04ff198a44fa5b1bdea37a0f03af3d9d75e1a6D�[ � 5268af6fbc32bf7411d9d0df3379c86428de9b0d25cbcbd8a6f1703caac79829D�Z � d977ef2c9e09f15898d44de8446c4e0984f357c637fa6b2194f05cf87e8abc29D�Y � c4a681b60727112a37ddcabfef6cfcafd36496fa1748cd9e419ad0d579eeb740 : s�* : �l�*g�s�Andrew Price <anprice@redhat.com> - 3.1.10-10^��- libgfs2: Use sizeof for 'reserved' fields in ondisk.c - fsck.gfs2: Disambiguate 'check_data' - gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta - fsck.gfs2: Disambiguate check_metalist - fsck.gfs2: Fix segfault in build_and_check_metalist - fsck.gfs2: Retain context for indirect pointers in ->check_metalist - fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations Resolves: rhbz#1487726�4�)e��Andrew Price <anprice@redhat.com> - 3.1.10-9[��- fsck.gfs2: Don't check fs formats we don't recognise - libgfs2: Fix pointer cast byte order issue Resolves: rhbz#1616389� �(e�7�Andrew Price <anprice@redhat.com> - 3.1.10-8[,�- glocktop: Remove a non-existent flag from the usage string Resolves: rhbz#1544944� �'e�/�Andrew Price <anprice@redhat.com> - 3.1.10-7Z�>�- mkfs.gfs2: Scale down journal size for smaller devices Resolves: rhbz#1498068 4 ^�� 4 �5�.q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�-q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��,k�3�Andrew Price <anprice@redhat.com> - 3.1.10-11.1_u�- mkfs.gfs2: Don't use i/o limits hints <4K for block size Resolves: rhbz#1853625� �+g�W�Andrew Price <anprice@redhat.com> - 3.1.10-11^�(@- gfs2_jadd: Handle out-of-space issues - gfs2_jadd: error handling overhaul Resolves: rhbz#1837640 u �T� u ��2i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�1q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �0i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��/i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��6{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�5k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��4u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�3u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �9i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��8i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�7q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�>k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��=u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�<u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��;i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�:q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�Bq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�Aq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��@s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��?{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��Fi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Eq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �Di�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Ci�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��J{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�Ik� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Hu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Gu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �Mi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Li�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�Kq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�Rk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Qu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Pu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��Oi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Nq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�Vq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�Uq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��Ts� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��S{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��Zi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Yq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �Xi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Wi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��^{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�]k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��\u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�[u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �ai�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��`i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�_q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�fk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��eu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�du�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��ci�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�bq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�jq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�iq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��hs� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��g{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��ni�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�mq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �li�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��ki�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��r{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�qk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��pu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�ou�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �ui�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��ti�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�sq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. of Hflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��u ��| �� �� �� �� ��% ��- ��6 ��? ��G ��O ��W ��_ ��f ��n ��v �� �� �� �� �� �� �� �� ��& ��* ��. ��2 ��6 ��9 ��> ��B ��F ��J ��M ��R ��V ��Z ��^ ��a ��f ��j ��n �r �u �z �~ � � � � � � � � �" �& �* �. �1 �6 �: �> �B �E �J �N �R �V �Y �^ �b �f �j !�m "�r #�v $�z %�~ &� '� (� )� *� +� ,� -� .�" /�& 1�) 2�. 3�2 4�6 5�: 6�= 7�B 8�I 9�P :�W ;�^ =�e >�l ?�s @�z A� B� C� D� E� F�$ -!l � �:�zk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��yu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�xu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��wi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�vq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�~q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�}q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��|s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��{{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� � i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � � i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008�� u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � � i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�"k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��!u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1� u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�&q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�%q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��$s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��#{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 e �r+��V��: � � e D�r � b649840984828bb702a86f59b74053d9fb62a7d9512eed421f9ac6fd2c5e648aD�q � e6b35740952d21b92b5fd63b78ed0f5a4649c9aeb22cf9cb5af2d6c5c8a86dc3D�p � 37036b6e228127d501401f8546d504c70f6e51fcc1271a33342effbc6d6a62cdD�o � 44fdf0fd6b2ea0867e2530297d92b753e9b67534567ffa09595ff50bc74c9886D�n � 4f181bcb90816497b5e18006556c8e9c5e26bb5a1da4f5be2acce0472c81866dD�m � 087a9eb6f7e5a03f17d35ced5aea62e436334f59bd027880ae3be3eb69257219D�l � 37146ed7255163cbdf3bb94a0f5e8ea9cb46eeddd0d269546fb213017f212548D�k � bf6b711d995c2cfcd7c146204145b34ce97998804eb37c62306f383d81097962D�j � 7f8cb3fbedf15a4146ccc43a641071e7f99fbde04c72526476d5cd90545e4644D�i � 6f603069d8c52e3cf80cd2299fead7f8539598c42a9cd85ae42363724530da93D�h � 6a1b6459f1f724a4030deb520745ead7657fcaae71a35ba2905022d5da341997D�g � 5c264476a12da876822ba10518576ea9ba06566847192d58c4642df8ad70f0deD�f � eace35203de4fbc64ea081a27197877a56615d25b23b30e79f559209ff736310 u �T� u ��*i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�)q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �(i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��'i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��.{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�-k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��,u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�+u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �1i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��0i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�/q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�6k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��5u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�4u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��3i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�2q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�:q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�9q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��8s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��7{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��>i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�=q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �<i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��;i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��B{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�Ak� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��@u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�?u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �Ei�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Di�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�Cq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�Jk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Iu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Hu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��Gi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Fq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�Nq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�Mq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��Ls� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��K{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��Ri�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Qq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �Pi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Oi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��V{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�Uk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Tu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�Su�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �Yi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��Xi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�Wq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�^k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��]u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�\u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��[i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�Zq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�bq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�aq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��`s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��_{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��fi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�eq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �di�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��ci�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��j{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�ik� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��hu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�gu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �mi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��li�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�kq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�rk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��qu�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�pu�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��oi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�nq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�vq�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�uq�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��ts� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��s{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��zi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�yq�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �xi�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��wi�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��~{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�}k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��|u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�{u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5� q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[� q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O� q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� � i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5� q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[� q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081�� s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��"i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�!q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� � i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.�� i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��&{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�%k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��$u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�#u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 e �r+��V��: � � e D� � 3c79cb3de74e545373941c507295276cafff95e505438c0bb771fd73deb0cf11D�~ � 722785536ad769e0f2077e33c2c6aa02937baf01e2357433b6873c7a444503daD�} � 0506a69ed5099abb05188f0ad253ebf7fb23f9516de5789b336622a000b67e9dD�| � e10f54c5d580e560b5d4611357d17fabf744c685d0597c57f65096c26149632cD�{ � c1b656d07a2265aaad3c80a8e621f30eacc4d7131ecac7e66fade5608ce366e2D�z � 0918063cb9b48c317391f431d587661c39613d95bd83d01ca9029660d7a1dfd9D�y � 8509fe4641cb16b24f3aced3e8cb56ef28648055b03221b4d4cb4017259e1995D�x � 497230bf98b04ad42a5e86190210020c9d693a673e748256dfdae01fda278f6bD�w � e3c6ac455f3f655e70629ab69610a70ab4f4e55490536ec08dc32ec06031f28bD�v � 6c21b000ed4eaee655f575de1d380dded8d228f9631df396279ba89debbe6faeD�u � ce44bc6fbc305c3861c8d26e236f8872ccd1827001528bced75ea5a087db84d4D�t � 84b71cd28250d68d8dd0c9a9da4983782f0ef2c5888c5734b7d12841ff61313bD�s � ee8a7377ed0c955a55eec8ea39cbb91e5c2b99a4b050e0f4136075e5c7c87796 � G; � � �)i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��(i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�'q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�.k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��-u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�,u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��+i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�*q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 X {� X �5�2q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all.�[�1q�G�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15[(�@- move instaweb to separate git-instaweb subpackage. Resolves: #1213059 - move gnome-keyring to a separate git-gnome-keyring subpackage. Resolves: #1284081��0s� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��/{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 u �T� u ��6i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�5q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059� �4i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��3i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog. l K��l ��:{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067�:�9k� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��8u�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�7u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 � G; � � �=i�Q�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18[H�@- Use the correct apache module directory in instaweb. - Apply the docs fixes to instaweb as well.��<i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17[D��- Correctly return an error from fsck on encountering a .gitmodules symlink. This was broken in the debian 2.1.x backport and found by covscan. Fix the test to catch this. - Correct a typo in changelog.�5�;q�{�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16[:�- Remove EL-5 settings and old Fedora conditionals. Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and 2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8. - Fix builds using '--without docs' - Change git-instaweb default from lighttpd(not available in rhel7) to apache2. - Add requires for git-{instaweb,gnome-keyring} to pull them, when installing git-all. -!l � �:�Bk� �Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23^˳@- Prevent crafted URL containing new lines, empty host or lacks a scheme to cause credential leak. Resolves: CVE-2020-11008��Au�=�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22^�@- Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260�1�@u�o�Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21]��- Fix CVE-2019-1387: remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387��?i�)�Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20[��@- Fix CVE-2018-17456: arbitrary code execution via .gitmodules Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1�O�>q�/�Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19[���- Fix httpd modules path to be independent from system architecture. Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2 Resolves: #1213059 3 {�~�E � 3 � �Iu�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�Hiy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221��Ga�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �Fu�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�Eiy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221��Ds� �Masahiro Matsuya <mmatsuya@redhat.com> - 1.8.3.1-25df@- Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365��C{� �Ondřej Pohořelský <opohorel@redhat.com> - 1.8.3.1-24c�@- Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 M g�c�_ � M � �Pu�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�Oiy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221h�Nu_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��Ma�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000h�Lu_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��Ka�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��Ja�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000 g�U�# � ��Wa�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000h�Vu_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��Ua�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��Ta�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �Su�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�Riy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221��Qa�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000 t �#��Q � t o�^iy Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221h�]u_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��\a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��[a�K�Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �Zu�E�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�Yiy�Jens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221h�Xu_�Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596 e �r+��V��: � � e D� � a09b59d166ae4f96e35aa50238b29f47cbf2e30ed154a83dd200b7627918a160D� � b2b420ac2c03b3a2e4cadd073857498446180ec51a863fe30335c9da3a963fdeD� � ee561a3f0dd8945edec3478e8426cc324bdf6fc5fe6a31d762cfae60d3e14830D� � d41ecaf1cea900f2c9354fc197197c80a88316766208fa264735e4153be0668eD� � c7dec18b5dff68e91dd42275e011d20aecbe60817c948f50fef7adfc8276ec34D� � 1f62ae8c12fed4f7639f910b2b5ff758d169ec26fdf5536df0cfd5d6bee2d247D� � bbce7868f8e66ee5f69db6702fdb909d81b8c17bb4f7417dbf08a87ef2a26308D� � 79588570ccbd1df263463cf10a5d97ef323266e2abedfeb2fefafd34609a08dfD� � 45fefc5e38fdda8877b262c158dcf1558ddd8b48fca3c2cd58b21d90e637096fD� � 449fcca21f14ce7eafdbe53266ec3665872f2ce58cd9fd10b5ebe923ec7e12a2D� � cb1bff3dcdabc1801553de1e4bae164ca1ca0aa473eebe3e7afd8360d53dcad7D� � b65a283b2abdd24d3efe7491ad9fbe6bab445307ebf30070af80a0fd335b8560D� � d1d53660bffa4c0d03720470eba69755d1fe600ebcd13dc49a736237a10983eb `�.�Q � ��ea�KRay Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �du�EMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�ciyJens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221h�bu_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��aa�KRay Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��`a�K Ray Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �_u�E Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099 M ��U�Q � M h�lu_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��ka�KRay Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000h�ju_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��ia�KRay Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��ha�KRay Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �gu�EMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�fiyJens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221 \ ��U�Q � \ � �si�/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�riaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)h�qu_Michael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-9`��@- Fix CVE-2021-27219 Resolves: #1960596��pa�KRay Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000��oa�KRay Strode <rstrode@redhat.com> - 2.56.1-8_��@- Backport patch to fix leak in g_signal_connect_object Resolves: 1887862 Related: #1717000� �nu�EMichael Catanzaro <mcatanzaro@redhat.com> - 2.56.1-7^�2�- Backport patch to limit access to files when copying (CVE-2019-12450) Resolves: #1722099o�miyJens Petersen <petersen@redhat.com> - 2.56.1-6^��@- Backport patches for GDBus auth Resolves: #1777221 O ��~} O �/�zi�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�yi� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �xi�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�wi� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�vikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��ui�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�ti�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) � � �y � z�i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�~i� Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �}i�/ Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�|ia Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)x�{i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) - |N�D � - ��i�O Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i� Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �i�/ Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) � ��f � � f�s] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/� i�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x� i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� � i� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z� i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) s q�Z�r � s x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i� Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �i�/ Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816) j M�i�R � j z� i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i� Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�s] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) d |N�j � d u�$i� Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �#s�# Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�"s] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�!i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/� i�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x� i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� � i� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) e �r+��V��: � � e D� � acbb0c34227bd9c7bba35cfa08b4942dd141ee4ccadd128d8acedaef5e31522cD� � 1cdd1bc2cbd53aa25851e70a8024e7e85db9b9d0fcdfcc2df323c89e5944ec7aD� � 43b68e9aee5969d0a7628cb49b8b9e8a4b328432cd2bbf3a542567a7d9be9cc8D� � aba75d84977de2cd5e9da00e763912c5e72ba28b55b17e081014e97ca13ce809D� � f48caf62db65a846a2e5bf134e7e6a5aa0bcc81a67c9995255a33f3f18ab9f65D� � 0fbc642e2648e77838d136eb26008e221d165a8465fd50b51c8e7ef52d5c3376D� � f48d75115ac638576d608849a173ace6a70c2430a2e0226487652befdf004b27D� � c59d4299cbd7dc796fc38b8ac3ad9e4a8030d20ee8831940a24af8b28a84cca5D� � 58dd6ecca9f9c38c402d46c56efacaf2a8739de21c64f22dfb3f9887f2de6c94D� � 7b92de985a23ef4b67bd11135a92917ca99025920b1e4db59517205a2278c3f1D� � d7000378e73195f460b1df7dafb97183eefb63440b39636075973f460f0b141dD� � c67a99f8d73138551a0d40218c32828b28c8df46641ed69f149aa858bfb4476cD� � d0c3a21a7ae050cc88bb11365edee8ae76ce4656de55be60d371d691353d0a2a L a�y�z � L x�+i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�*i�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�)i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �(i� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�'i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�&ik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��%i�O Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) � � j�� � � x�2i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �1i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�0i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�/ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��.i�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� �-s�# Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�,s] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) M�i�" � h�9ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��8i�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)�5�7i�Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �6s�#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�5s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�4i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�3i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) _ ����V � _ � �@s�#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�?s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�>i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�=i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�<i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �;i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�:i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543) 2 G�_�` � 2 x�Gi� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Fi�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ei� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Di�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Ci� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�BikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�5�Ai�Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930) x � P�y � x � �Ni�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Mi� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�LikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)i�KWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�Ji�Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �Is�#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Hs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) ; ��W�` � ; i�UWDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�Ti�Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �Ss�#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Rs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Qi� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Pi�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Oi� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) � � ��� � � �\i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�[i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ZikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Yi�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Xi�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �Wi�/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�ViaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573) F ��W�P � F h�cikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��bi�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�ai�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �`i�/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�_i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�^i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�]i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) u ����V � u u�ji�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�is]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�hi� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�gi�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�fi� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ei�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�di� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543) L a�y�z � L x�qi� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�pi�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�oi� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ni�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�mi� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�likFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��ki�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) � � j�� � � x�xi� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �wi�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�vi� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�uikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��ti�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� �ss�#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�rs]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) : M�i�" � : z�i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�~ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�5�}i�Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �|s�#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�{s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�zi� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�yi�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) # |N�j � # �5�i�Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� � i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) �.�'� � � �i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z� i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�� i�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u� i�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� � i�/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�iaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i�WDJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058) K ��W�b � K ��i�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �i�/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�iaFlorian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) \ ��f � \ � � i�/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) O ��~} O �/�#i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�"i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �!i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z� i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�� i�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u� i�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) � � �v � z�*i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�)ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��(i�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�'i�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �&i�/Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)f�%s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�$i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) e �r+��V��: � � e D�& � aeb54137355c495d8cbda465df5347f7e0075a2330f89bc679ccd9d8f8d5b4f6D�% � cffd614b0edc8b160d92daa7f3c4c4dffd5e33a66532c35ee32132d1b56e63b7D�$ � b3e7d51cd260028cee1b21b2d94a9e4694745e0e673f10a05aebb54a5a4928abD�# � c4697b0258943ed3a070f75ed2b1163ddeb2746108163a6b372318bfc419db74D�" � 9ba71fe357dd09d1913b30b0bd83507588d8cb06eda6f2c15326f3f1384c6180D�! � b05ac36a6c2c5fb2a3b34dee8aff347281f1ee28b49846b4add728a5cd69f06aD� � 68765f29d06d31652e80d398846d899e7437a836c1fffeb61248afa76e51b90fD� � 178ac00cbf99e924ca4b26e5bede47496404e34c1fe48906789d80dd955c9793D� � a25ea7a2e7fdf9c96aa665fd1d337fa501a8be996a208eede238af6018d94012D� � 7ea4c424cb331a1de27539fd790be4a991e6525f0d33035d854f2e66e0c2e274D� � 235d7a11f2bec5ce59b3207ad420c1a0034747f77ac4902d343951c7bd4109d6D� � ff4671dfa3a8f95a13b8ba51b2a558742445e61b30cbb1cf07788364ca2bb076D� � aab72ef4b89bc4481b87f7aaf225cbdefb62073dddddc7fc7c2b94ab11a0a936 S |N�j � S ��1i�OCarlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�0i�Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�/s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�.i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�-i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�,i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �+i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) � ��f � � f�8s]Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�7i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�6i�wCarlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�5i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �4i�Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�3i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�2ikFlorian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) t r�[�s � t x�?i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �>i� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�=i� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�<ik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��;i�O Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�:i� Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �9s�#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) T M�i�< � T z�Fi� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Eik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Di�O Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� �Cs�# Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Bs] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Ai� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�@i�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) # |N�j � # �5�Mi� Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �Ls�# Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Ks] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Ji� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Ii�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Hi� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Gi� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) L a�y�z � L x�Ti� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Si�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ri� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Qi� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Pi� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Oik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Ni�O Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) i � P�h � i x�[i� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Zi� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Yi� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Xik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�5�Wi� Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �Vs�# Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Us] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) K M�i�" � K h�bik Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)i�aW DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�`i� Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �_s�# Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�^s] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�]i� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�\i�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) _ ����V � _ � �is�# Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�hs] Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�gi� Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�fi�w Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�ei� Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �di� Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�ci� Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543) d G�u�n � d h�pik!Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��oi�O!Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�ni�!Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �mi�/!Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�lia!Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i�kW DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�ji� Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930) O ����V � O u�wi�"Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �vi�/"Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�ui� !Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�ti�w!Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�si� !Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �ri�!Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�qi� !Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543) L a�y�z � L x�~i� "Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�}i�w"Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�|i� "Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �{i�"Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�zi� "Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�yik"Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��xi�O"Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) � � �� � x�i� #Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i�#Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� #Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik#Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O#Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u� i�#Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�s]"Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) T M�i�< � T z� i� $Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h� ik$Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�� i�O$Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)� � s�##Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�s]#Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� #Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w#Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) # |N�j � # �5�i�$Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#$Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�s]$Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� $Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w$Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� $Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� � i�$Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) � ��f � � f�s]%Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� %Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w%Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� %Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i�%Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� %Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik%Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) A r�M�X � A ��!i�O&Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u� i�&Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� � i�/&Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c� ia&Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i� W%DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5� i�%Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#%Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536) � ��f � � c�(ia'Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)x�'i� &Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�&i�w&Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�%i� &Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �$i�&Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�#i� &Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�"ik&Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816) e �r+��V��: � � e D�3 � 4c33dc16f8bf9f19d59d71c209205c27c9923c2016d5ca5f3409885c95bd8be4D�2 � ae5b869408794a434481ba8d5927690a56b9e2045b44efc1cca5b637285e435cD�1 � cafdbebcda7664e47d81f647d715249983cbe0bb4b063c1d56ab327a8766e2d0D�0 � deefbf7dc62157f10bf35bfcceae5fb497403a6fbf86fef1e8cfd5636f7bad10D�/ � 670e8233e94a81c11ff801e9565903257b0694462a07b7f8724d3008d060ad94D�. � 2fda5e0025c27a97a92116265279bc7592a072372d95f68ec7c2e289e884155bD�- � 5e130e7019c26fc26493cc8b1c227f57d4451afda99fda03e0dac4bd46628980D�, � f7501b0cdc7eb8f83b56ce263d1a1408914f103af339c893bd31a587ad345cd3D�+ � f2fa340f24195c35a86b3ed5c2f4ca5405ba1e6482aab26dd1e8d7ce339a73fbD�* � 6815b9d123a4214f4d4bf68b7d0d6c2ea059a5ed94bf0abe1b157d1e14de7f6cD�) � 49e01e923bc5d1026751341c9a01ab8ef4d50d8b17e94f179de33afcbfb0b234D�( � eae7a2d2bc9f6058c113c27e6bdea6677a865df0f7924ed51165a2653c2d2175D�' � 650dc5eb73a88b8297704da202b361a3a2367643c25269a9d667ea5803dbc397 s q�Z�r � s x�/i� 'Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �.i�'Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�-i� 'Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�,ik'Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��+i�O'Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�*i�'Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �)i�/'Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816) D M�C�, � D z�6i� (Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�5ik(Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��4i�O(Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�3i�(Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �2i�/(Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x�1i� 'Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�0i�w'Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) c |N�j � c u�=i�)Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �<i�/)Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)f�;s](Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�:i� (Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�9i�w(Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�8i� (Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �7i�(Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977) L a�y�z � L x�Di� )Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Ci�w)Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Bi� )Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Ai�)Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�@i� )Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�?ik)Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��>i�O)Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) � � �� � x�Ki� *Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Ji�*Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Ii� *Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�Hik*Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Gi�O*Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Fi�*Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�Es])Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) Y M�i�c � Y h�Rik+Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Qi�O+Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�Pi�+Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� �Os�#*Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Ns]*Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Mi� *Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Li�w*Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) _ ����V � _ � �Ys�#+Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�Xs]+Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�Wi� +Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�Vi�w+Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�Ui� +Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �Ti�+Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�Si� +Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543) L a�y�z � L x�`i� ,Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�_i�w,Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�^i� ,Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �]i�,Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�\i� ,Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�[ik,Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��Zi�O,Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) E � P�F � E � �gi�-Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�fi� -Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�eik-Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��di�O-Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)�5�ci�,Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �bs�#,Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�as],Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) < ��W�` � < h�nik.Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�5�mi�-Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �ls�#-Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�ks]-Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�ji� -Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�ii�w-Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�hi� -Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� I�2 J�9 K�@ L�G M�N N�U O�\ P�c Q�j R�q S�x T� U� V� W� X� Y�# Z�* \�1 ]�8 ^�? _�F `�M a�T b�[ c�b d�i e�p f�w g�~ h� i� j� k� l�! m�( o�/ p�6 q�= r�D s�K t�R u�Y v�` w�g x�n z�u {�| |� }� ~� � �� ��& ��- ��4 ��= ��D ��L ��U ��[ ��e ��l ��t ��} �� �� �� �� ��% ��+ ��5 ��< ��D ��M ��S ��] ��d ��l ��u ��{ �� �� �� �� �� ��# ��* ��1 ��6 ��= ��B ��I ��P ��W ��^ ��e ��k ��s ��{ �� �� �� �� �� ��$ ��+ ��2 ��8 ��? ��F _ ����V � _ � �us�#.Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�ts].Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�si� .Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�ri�w.Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�qi� .Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �pi�.Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�oi� .Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543) A G�p�o � A �/�|i�w/Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�{i� /Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �zi�/Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�yi� /Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�xik/Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)i�wW.DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�vi�.Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930) t � ��i t � �i�/0Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)c�ia0Florian Weimer <fweimer@redhat.com> - 2.17-313^0"@- Remove problematic Obsoletes: (#1795573)i�W/DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5� i�/Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �s�#/Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�~s]/Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�}i� /Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) O ��~} O �/� i�w0Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x� i� 0Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i�0Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� 0Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik0Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O0Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i�0Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325) s ��~�t � s � �i�1Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� 1Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�ik1Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O1Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u� i�1Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)� � i�/1Florian Weimer <fweimer@redhat.com> - 2.17-314^1s�- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)x� i� 0Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162) l ��W�v � l h�ik2Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)��i�O2Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853)u�i�2Florian Weimer <fweimer@redhat.com> - 2.17-315^1s�- argp: Do not override GCC keywords with macros (#1763325)f�s]1Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�i� 1Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�i�w1Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� 1Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380) _ ����V � _ � � s�#2Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f� s]2Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x� i� 2Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/� i�w2Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�i� 2Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �i�2Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�i� 2Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543) L a�y�z � L x�&i� 3Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�%i�w3Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119)x�$i� 3Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �#i�3Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�"i� 3Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�!ik3Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�� i�O3Carlos O'Donell <carlos@redhat.com> - 2.17-316^2�@- Adjust security hardening changes for 64-bit POWER BE due to toolchain limitations (#1793853) i � P�h � i x�-i� 4Carlos O'Donell <carlos@redhat.com> - 2.17-320_�T�- CVE-2020-29573: Harden printf family of functions (#1869380)� �,i�4Carlos O'Donell <carlos@redhat.com> - 2.17-319_�T�- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)z�+i� 4Carlos O'Donell <carlos@redhat.com> - 2.17-318_�T�- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)h�*ik4Florian Weimer <fweimer@redhat.com> - 2.17-317^���- Do not clobber errno in nss_compat (#1834816)�5�)i�3Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �(s�#3Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�'s]3Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204) e �r+��V��: � � e D�@ � b808a968c2ce3fd33503aecac4b0f640badeb9c4fc64b22515676fc26677bdbaD�? � 18f14d208b245267c6cc29b0b7074e0e030ee89e895659c26047d4186135bd94D�> � 6c06e0b4e7b36d4a64097557ada558aaa42f90b60af6f66d06329756c6ea57c9D�= � b126c7678a3e74f9a0dca6136f61a6fdd9471991c6ce22a72c08d8a8aa86f2e1D�< � 5c3a51f2cd800bc1eb63007add93f02cb14e4acbe93b537fa3fb5d1a05f91ceaD�; � 9ff292253bb056d6533811af24502ff8e6b9f03d370e153698aff7cc1cb568b6D�: � 794055514a0043fb0a97d85b7e623b6862a4861b6e488835385596d392b4f24eD�9 � a9cdf7b1790648907c553d9bd3ea79400a2884d68c1cb870f1c3d0c0ef2af44dD�8 � 63e5114d5fdf7fa2162781d184e8588d2af92fd268bf72cf0824edd0ad85d504D�7 � 83e83351bd9f8e17bb928673f2236a6035cf3a335789585a60a5d5068c2c8b23D�6 � 68fdae357028fe930922530fba8f0491b1f04b11e6ce8cc9f6c7b362bfe37101D�5 � bffa643f42fbf585a2b14d6c8bfb9d7ac804826cf20ad4d14bbdc3c996290615D�4 � b8969d6cee16b77e095cb73262e74f3bea7aeaacc386fb96ed8274c2732c2893 ] M�i�" � ] V�4u;5Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714i�3W4DJ Delorie <dj@redhat.com> - 2.17-326b4t@- resolv: Handle DNS transaction ID collisions (#2065058)�5�2i�4Florian Weimer <fweimer@redhat.com> - 2.17-325a G�- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case conversion in strcasecmp, strncasecmp (#1993930)� �1s�#4Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-324`]�- Move __isnanl_pseudo into its own file and link only into libc (#1927536)f�0s]4Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-323` 3@- Fix isnanl check in printf. (#1925204)x�/i� 4Carlos O'Donell <carlos@redhat.com> - 2.17-322_��A- Enable file-based IFUNC selection on NVMe devices (#1883162)�/�.i�w4Carlos O'Donell <carlos@redhat.com> - 2.17-321_��@- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl, sincosl, and tanl function. (#1812119) z �N���H � z f�=yW5CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�<� ;5Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�;�;5Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�:�;5Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�9�g5Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k�8�Q5Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�7u;5Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�6u;5Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�5u;5Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657 J �:�p � J `�D�;6Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�C�;6Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�B��16Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�A� ;6Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�@� ;6Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�?�;6Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�>�;6Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k�L�Q7Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�Ku;7Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�Ju;7Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�Iu;7Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�Hu;7Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�GuW6CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�F�;6Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�E�� 6Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�U� ;8Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�T� ;8Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�S�;8Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�R�;8Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�QyW7CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�P� ;7Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�O�;7Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�N�;7Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�M�g7Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�[uW8CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�Z�;8Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�Y�� 8Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`�X�;8Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�W�;8Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�V��18Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 ! �N��.�R � � ! f�eyW9CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�d� ;9Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�c�;9Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�b�;9Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�a�g9Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k�`�Q9Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�_u;9Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�^u;9Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�]u;9Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�\u;9Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714 J �:�p � J `�l�;:Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�k�;:Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�j��1:Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�i� ;:Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�h� ;:Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�g�;:Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�f�;:Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k�t�Q;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�su;;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�ru;;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�qu;;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�pu;;Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�ouW:CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�n�;:Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�m�� :Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�}� ;<Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�|� ;<Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�{�;<Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�z�;<Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�yyW;CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�x� ;;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�w�;;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�v�;;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�u�g;Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�uW<CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`��;<Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R��� <Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`� �;<Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`��;<Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�~��1<Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 ! �N��.�R � � ! f� yW=CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb� � ;=Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`� �;=Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`� �;=Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v� �g=Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k��Q=Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�u;=Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�u;=Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�u;=Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�u;=Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714 J �:�p � J `��;>Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`��;>Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\���1>Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�� ;>Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�� ;>Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`��;>Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`��;>Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k� �Q?Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�u;?Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�u;?Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�u;?Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�u;?Deepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�uW>CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`��;>Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R��� >Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�%� ;@Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�$� ;@Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�#�;@Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�"�;@Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�!yW?CentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb� � ;?Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`� �;?Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`� �;?Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v� �g?Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�+uW@CentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�*�;@Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�)�� @Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`�(�;@Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�'�;@Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�&��1@Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 e �r+��V��: � � e D�M � be7ce57daa28ef35ce7974665112d6551b70b8c48b1c14c9fb067c8aae658533D�L � 134432ad69b8ff48c6929ed4f645153058d8cb0020dbb0be3eeb7ead882052b9D�K � 838f9c1a4495b9f9bd85ed4019e8c2dc8ac645f72e221541ed03338c1cea45bdD�J � e67c1938cd59583e0619d2d7e8c5830ae4585c3509d473ef7f73fac3a559c82fD�I � 72811299e34ce97ab4abb454b8e728ca0bcc192a314cab3cc6799df21cc7b92bD�H � c40a3a99e0047693ac6789e2c35f28639c6c6c3dafcaa8083ab1f6aec4279cd6D�G � aa8159ebe427848a84e44ec1263eb6e8467bd09994185803163c9501ede167adD�F � dd928d632917d65ac27ed05d45f342a550ac01430159ae99363d9a406701fe04D�E � 276df6b2e20398eb1acd7d2327f480491884ec450b49410d4cad1f010cba2e36D�D � ea5bee404d5fc3e07b6c6c946b4663fdc9b4befd89d89e5fd0c57da7b27800ecD�C � b843af350666656b6246dd355d5e90fac356a7c6b609118d69957fefcf9350b3D�B � a100ffb8d2d8478959b6d515f8a57612af98cd23cd3f340be8fdc45b223ebd2bD�A � b83531fbbb21a612cb6bf9dd29ef1ba3afdeacd82de1d86b9949dac00d9edecb ! �N��.�R � � ! f�5yWACentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�4� ;AGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�3�;AGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�2�;AGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�1�gAGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k�0�QAGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�/u;ADeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�.u;ADeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�-u;ADeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�,u;ADeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714 J �:�p � J `�<�;BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�;�;BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�:��1BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�9� ;BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�8� ;BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�7�;BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�6�;BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k�D�QCGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�Cu;CDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�Bu;CDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�Au;CDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�@u;CDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�?uWBCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�>�;BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�=�� BGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�M� ;DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�L� ;DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�K�;DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�J�;DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�IyWCCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�H� ;CGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�G�;CGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�F�;CGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�E�gCGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�SuWDCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�R�;DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�Q�� DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`�P�;DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�O�;DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�N��1DGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 ! �N��.�R � � ! f�]yWECentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�\� ;EGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�[�;EGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�Z�;EGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�Y�gEGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926k�X�QEGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�Wu;EDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�Vu;EDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�Uu;EDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�Tu;EDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714 J �:�p � J `�d�;FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�c�;FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�b��1FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641b�a� ;FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�`� ;FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�_�;FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�^�;FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372 � *�`�U � � k�l�QGGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-46_�"�- fixes bugs bz#1873469 bz#1881823V�ku;GDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-45_X�- fixes bugs bz#1785714V�ju;GDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-44_P�- fixes bugs bz#1460657V�iu;GDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-43_P�- fixes bugs bz#1460657V�hu;GDeepshikha Khandelwal <dkhandel@redhat.com> - 6.0-42_O�@- fixes bugs bz#1785714d�guWFCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�f�;FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�e�� FGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205 c �$�\��- � c b�u� ;HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.2`��@- fixes bugs bz#1953901b�t� ;HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56.1`�e@- fixes bugs bz#1927235`�s�;HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-56`v�@- fixes bugs bz#1948547`�r�;HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-55`T�@- fixes bugs bz#1939372f�qyWGCentOS Sources <bugs@centos.org> - 6.0-49.1.el7.centos`P��- remove vendor and/or packager linesb�p� ;GGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49.1`/�@- fixes bugs bz#1930561`�o�;GGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-49_�G@- fixes bugs bz#1286171`�n�;GGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-48_���- fixes bugs bz#1895301v�m�gGGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-47_��@- fixes bugs bz#1286171 bz#1821743 bz#1837926 : �=� � : d�{uWHCentOS Sources <bugs@centos.org> - 6.0-61.el7.centosbL/@- remove vendor and/or packager lines`�z�;HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-61a���- fixes bugs bz#1973566�R�y�� HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60ad'@- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205`�x�;HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-59`�E�- fixes bugs bz#1689375`�w�;HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-58`��- fixes bugs bz#1945143�\�v��1HGluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57`�[�- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 bz#1945143 bz#1946171 bz#1957191 bz#1957641 � P�j�i � t�syIFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e�IJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� IJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�~qwIFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�}msICarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�|q�iIFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501 j �e�P � j r�qwJFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�msJCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�s� IFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-IFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-IFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�IFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999 Z {��� � Z �� s�-JFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624�� s�-JFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058�� s�JFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� syJFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e�JJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� JJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 � ~ �p$� � ��]�'KRui Matos <rmatos@redhat.com> - 3.22.1-4Y��- Make our password validation similar to anaconda's Resolves: rhbz#1447941��]�3KRui Matos <rmatos@redhat.com> - 3.22.1-3Y �- Disable 'software' page as it doesn't make sense in RHEL Resolves: rhbz#1446735x�]�KRui Matos <rmatos@redhat.com> - 3.22.1-2X�C�- Honor anaconda's firstboot being disabled Resolves: rhbz#1226819I�e1KKalev Lember <klember@redhat.com> - 3.22.1-1W�%�- Update to 3.22.1I�e1KKalev Lember <klember@redhat.com> - 3.22.0-1W��@- Update to 3.22.0K�g3KKalev Lember <klember@redhat.com> - 3.21.92-1W��@- Update to 3.21.92q�ssJFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� JFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 C v�"s � C k� ayLRay Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^� a_LRay Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�e[LKalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621�+�i�oLBastien Nocera <bnocera@redhat.com> - 3.26.2-9Z�$�+ gnome-settings-daemon-3.26.2-9 - Revert automatic suspend after inactivity, it was rejected - Related: #1449171q�ymKMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.0-2.1b���- Remove timezone boundaries Related: #2098257z�a�KRay Strode <rstrode@redhat.com> - 3.28.0-2\�F@- Ensure vendora logo gets used instead of foot Resolves: #1711308`�i[KRichard Hughes <rhughes@redhat.com> - 3.28.0-1[�- Update to 3.28.0 - Resolves: #1568175��]�1KRui Matos <rmatos@redhat.com> - 3.22.1-5Y��@- Update session definition files to work with GNOME 3.26 Resolves: rhbz#1506607 � q�f� � ��#e�!LBenjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�"c�LBenjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �!m�'LCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320�� m�7LCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s� m}LCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� � m�+LCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904 � Q��!� � ��*m�7MCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�)m}MCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �(m�+MCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�'ayMRay Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�&a_MRay Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�%e[MKalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621�+�$i�oMBastien Nocera <bnocera@redhat.com> - 3.26.2-9Z�$�+ gnome-settings-daemon-3.26.2-9 - Revert automatic suspend after inactivity, it was rejected - Related: #1449171 p s�/�m � p � �1m�+NCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�0ayNRay Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�/a_NRay Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�.e[NKalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621��-e�!MBenjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�,c�MBenjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �+m�'MCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320 e �r+��V��: � � e D�Z � 8d5c171c9ce6a333fe8241291edf73b4b6bbed0df2258efac8cfac13210aba97D�Y � b06ece51d62eb4905a59da18d4a041ada4dc1d9541693245f60fa02f0ec302deD�X � 30eb275b4ea0c87a84abafbe22dd3006c16cac9a0fa0c57de243a23c72d28adfD�W � db4ef1e0a6b2f44fef3fdb8ad686016dcfa25ae6374a3646a9c898f01668d499D�V � 8afb8e27332a8489152d37ca03c25098d73ea51e0982b87f6a7bb7d35104b927D�U � 6ff94086763de7dbc7a08197fae9ec80ef7dbba995606dc86e245517b4635a11D�T � 68b19039b1e53465dc3f08f0e56e24f7e1672b449a51dd05f8ae10ff49416b66D�S � 86f47f4e0ba937bd5cc3e11936092ae2624f85a10417a53a3620844161158224D�R � 821df7321c6fd01dc77f9435ba556d7b08cfdfdb262113c4223883e34adeedf3D�Q � 195f9b3429ced50e475e3f14ae59ece2ac1f581466cf6713231c9da9927283e0D�P � b08dd14ff4c9cde964c7eb832ae4496d321debc822b86b970f8051ca8589c6b3D�O � c4456d3a9934c3fe90a0750649cc735745508843da43735b39aa5cdcaadb99a4D�N � d6af98392b986204b8b504202adcf13ec1eca355c819f9d4a1ee4d8448a14c55 $ ��h�$ ��6e�!NBenjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�5c�NBenjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �4m�'NCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320��3m�7NCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�2m}NCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197 " ��*�- � " ��=m�7OCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�<m}OCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �;m�+OCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�:ayORay Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�9a_ORay Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�8e[OKalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621��7o�3NCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`�t�- Fix possible crash on gsd-media-keys startup Resolves: #1878167 - Ignore permission issues during gsd-housekeeping file deletion Resolves: #1909954 - Revert mapping of "XF86RFKill" key Resolves: #1888412 l s�/ l �+�Bi�oPBastien Nocera <bnocera@redhat.com> - 3.26.2-9Z�$�+ gnome-settings-daemon-3.26.2-9 - Revert automatic suspend after inactivity, it was rejected - Related: #1449171��Ao�3OCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`�t�- Fix possible crash on gsd-media-keys startup Resolves: #1878167 - Ignore permission issues during gsd-housekeeping file deletion Resolves: #1909954 - Revert mapping of "XF86RFKill" key Resolves: #1888412��@e�!OBenjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�?c�OBenjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �>m�'OCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320 � �>�A�6 � � �Im�'PCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320��Hm�7PCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�Gm}PCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �Fm�+PCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�EayPRay Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�Da_PRay Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�Ce[PKalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621 N B� �K � N � �Pm�+QCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�OayQRay Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�Na_QRay Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�Me[QKalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621�+�Li�oQBastien Nocera <bnocera@redhat.com> - 3.26.2-9Z�$�+ gnome-settings-daemon-3.26.2-9 - Revert automatic suspend after inactivity, it was rejected - Related: #1449171��Ke�!PBenjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�Jc�PBenjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296 b ��h�$ � b ^�Wa_RRay Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�Ve[RKalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621��Ue�!QBenjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�Tc�QBenjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �Sm�'QCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320��Rm�7QCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�Qm}QCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197 ' ���k � ' ��^e�!RBenjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�]c�RBenjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �\m�'RCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320��[m�7RCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�Zm}RCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �Ym�+RCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�XayRRay Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161 " ��*�- � " ��em�7SCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-7]L�- Fallback scale properly without org.gnome.Mutter.DisplayConfig Resolves: #1556776s�dm}SCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-6]J�@- Handle rfkill device disappearing Resolves: #1691197� �cm�+SCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-5]5�@- Added patch for - keyboard: Enable ibus for OSK purposes Resolves: #1632904k�baySRay Strode <rstrode@redhat.com> - 3.28.1-4\�F@- Fix busy loop in account plugin Resolves: #1600161^�aa_SRay Strode <rstrode@redhat.com> - 3.28.1-2[Y��- Fix account schema Resolves: #1597353^�`e[SKalev Lember <klember@redhat.com> - 3.28.1-1Z�J@- Update to 3.28.1 - Resolves: #1568621��_o�3RCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`�t�- Fix possible crash on gsd-media-keys startup Resolves: #1878167 - Ignore permission issues during gsd-housekeeping file deletion Resolves: #1909954 - Revert mapping of "XF86RFKill" key Resolves: #1888412 s�/ � q�kssTFlorian Müllner <fmuellner@redhat.com> - 3.28.3-24]�N@- Fix orphaned animation actors Related: #1753799� �jc�7TRay Strode <rstrode@redhat.coM> - 3.28.3-23]�|@- Fix "Not Listed?" entry to shows characters instead of bullets Resolves: #1772896��io�3SCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-11`�t�- Fix possible crash on gsd-media-keys startup Resolves: #1878167 - Ignore permission issues during gsd-housekeeping file deletion Resolves: #1909954 - Revert mapping of "XF86RFKill" key Resolves: #1888412��he�!SBenjamin Berg <bberg@redhat.com> - 3.28.1-10_� @- Prevent automatic logout warning in greeter sessions Related: #1729296�:�gc�SBenjamin Berg <bberg@redhat.com> - 3.28.1-9_��- Keep auto-logout working inside VMs Resolves: #1672998 - Never log out automatically from greeter sessions Resolves: #1729296� �fm�'SCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]rJ@- Add display mapping check specific for the Dell Canvas Resolves: #1548320 X ��� � X X�scQTRay Strode <rstrode@redhat.com> - 3.28.3-32_�#�- Fix crasher Resolves: #1897063[�rcWTRay Strode <rstrode@redhat.com> - 3.28.3-31_��@- Add leak fixes Resolves: #1881995� �qs�%TFlorian Müllner <fmuellner@redhat.com> - 3.28.3-30^�)@- Wake up lock screen when deactivated programmatically Resolves: #1850201k�psgTFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^�@- Squash more JS warnings Related: #1751121��os�TFlorian Müllner <fmuellner@redhat.com> - 3.28.3-28^�@- Fix some (harmless but annoying) JS warnings Related: #1751121|�ns�TFlorian Müllner <fmuellner@redhat.com> - 3.28.3-27^�V@- Avoid warning on early signal emission Resolves: #1735700u�ms{TFlorian Müllner <fmuellner@redhat.com> - 3.28.3-26^�1�- Fix IM set-content-type handling Resolves: #1771841s�lswTFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^��@- Improve performance under load Resolves: #1824871 ? �� �, � ? [�{cWURay Strode <rstrode@redhat.com> - 3.28.3-31_��@- Add leak fixes Resolves: #1881995� �zs�%UFlorian Müllner <fmuellner@redhat.com> - 3.28.3-30^�)@- Wake up lock screen when deactivated programmatically Resolves: #1850201k�ysgUFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^�@- Squash more JS warnings Related: #1751121��xs�UFlorian Müllner <fmuellner@redhat.com> - 3.28.3-28^�@- Fix some (harmless but annoying) JS warnings Related: #1751121|�ws�UFlorian Müllner <fmuellner@redhat.com> - 3.28.3-27^�V@- Avoid warning on early signal emission Resolves: #1735700u�vs{UFlorian Müllner <fmuellner@redhat.com> - 3.28.3-26^�1�- Fix IM set-content-type handling Resolves: #1771841s�uswUFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^��@- Improve performance under load Resolves: #1824871q�tssUFlorian Müllner <fmuellner@redhat.com> - 3.28.3-24]�N@- Fix orphaned animation actors Related: #1753799 B �1�C�? � B � �s�%VFlorian Müllner <fmuellner@redhat.com> - 3.28.3-30^�)@- Wake up lock screen when deactivated programmatically Resolves: #1850201k�sgVFlorian Müllner <fmuellner@redhat.com> - 3.28.3-29^�@- Squash more JS warnings Related: #1751121��s�VFlorian Müllner <fmuellner@redhat.com> - 3.28.3-28^�@- Fix some (harmless but annoying) JS warnings Related: #1751121|� s�VFlorian Müllner <fmuellner@redhat.com> - 3.28.3-27^�V@- Avoid warning on early signal emission Resolves: #1735700u�s{VFlorian Müllner <fmuellner@redhat.com> - 3.28.3-26^�1�- Fix IM set-content-type handling Resolves: #1771841s�~swVFlorian Müllner <fmuellner@redhat.com> - 3.28.3-25^��@- Improve performance under load Resolves: #1824871q�}ssUFlorian Müllner <fmuellner@redhat.com> - 3.28.3-33` l�- Guard against StWidget crash Resolves: #1861428X�|cQURay Strode <rstrode@redhat.com> - 3.28.3-32_�#�- Fix crasher Resolves: #1897063 J �G�e�D � J �� e� WJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r� qwWFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� msWCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�q�iWFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501k�sgVFlorian Müllner <fmuellner@redhat.com> - 3.29.3-34`��- Fix another JS warning Resolves: #1860445q�ssVFlorian Müllner <fmuellner@redhat.com> - 3.28.3-33` l�- Guard against StWidget crash Resolves: #1861428X�cQVRay Strode <rstrode@redhat.com> - 3.28.3-32_�#�- Fix crasher Resolves: #1897063[�cWVRay Strode <rstrode@redhat.com> - 3.28.3-31_��@- Add leak fixes Resolves: #1881995 ] � r � ] �s� WFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-WFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-WFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�WFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� syWFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e�WJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270 � ��� � ��s�XFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�syXFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�XJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� XJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�qwXFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�msXCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417 N m�X�4 � N r� qwYFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� msYCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,� q�iYFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ssXFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� XFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-XFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-XFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��$s�-YFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��#s�-YFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��"s�YFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�!syYFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e�YJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270�� e� YJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��+s�ZFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�*syZFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�)e�ZJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��(e� ZJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�'qwZFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�&msZCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�%s� YFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�2qw[Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�1ms[Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�0q�i[Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�/ssZFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�.s� ZFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��-s�-ZFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��,s�-ZFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 e �r+��V��: � � e D�g � ae2e332cb8ed86d6de74c580f47de47f6f0d33330807f898fad3b7a0b8ffa440D�f � 728ac150acc4c81d235b89af0449b11ae268d8c5ea5df6ca8b54c4f90b3deb7cD�e � d2cc1f66c9ca4847924aa950f6bf6e884b94331ad97c0150bd241fccb76ae118D�d � 1dcd5933cc511b7268b7c46d30ee331788e825ef5dc6aeefc373ae7708e575f7D�c � e09b5f3555e23622b184571a63391c9f149a33111cf6ec9a07616cecca01c1c3D�b � 996c2919ed070ff29e27f8c9e3ec7f7ce69e1eea9e9da6d559423f84983ba41cD�a � 8d8f18480a50ae9e2993b7bee4e3a0d583f2b6288ec60e32b2b42a5b4256456aD�` � 1afd010d898c09610cd98864d1e601d56fbb031d59f51f0e0e1a08fc482b006fD�_ � 9c633fbd6673e42c90f906b0939d7603ab4b721859bff248db9a4cc0489b32a6D�^ � abb8fad659ee9b374da07546268016023d98393401191ae5ac9ac40748aad0edD�] � d3f83e6ec632331c1a4225feeaaf7c261512e7eb7a079d16b971c7c027fa3c0bD�\ � 90b70e89b675963abcce8494de690686f885b273dc190de89560db7345231837D�[ � d8e476878a37bbc6056f5f2cfa3f1c9b9406ca06fd0c7ba1bb6e17b09a385ae9 Z {��� � Z ��8s�-[Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��7s�-[Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��6s�[Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�5sy[Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�4e�[Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��3e� [Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��?s�\Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�>sy\Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�=e�\Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��<e� \Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�;qw\Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�:ms\Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�9s� [Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�Fqw]Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Ems]Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Dq�i]Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�Css\Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Bs� \Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��As�-\Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��@s�-\Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��Ls�-]Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Ks�-]Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Js�]Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Isy]Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�He�]Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ge� ]Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��Ss�^Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Rsy^Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Qe�^Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Pe� ^Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�Oqw^Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Nms^Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Ms� ]Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�Zqw_Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Yms_Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Xq�i_Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�Wss^Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Vs� ^Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Us�-^Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Ts�-^Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��`s�-_Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��_s�-_Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��^s�_Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�]sy_Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�\e�_Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��[e� _Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��gs�`Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�fsy`Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ee�`Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��de� `Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�cqw`Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�bms`Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�as� _Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�nqwaFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�mmsaCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�lq�iaFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�kss`Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�js� `Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��is�-`Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��hs�-`Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��ts�-aFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��ss�-aFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��rs�aFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�qsyaFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�pe�aJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��oe� aJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��{s�bFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�zsybFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ye�bJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��xe� bJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�wqwbFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�vmsbCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�us� aFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�qwcFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�mscCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,� q�icFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ssbFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�~s� bFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��}s�-bFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��|s�-bFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��s�-cFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-cFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�cFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sycFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�cJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� cJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s�dFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sydFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e�dJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270�� e� dJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r� qwdFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� msdCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417� s� cFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�qweFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�mseCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�q�ieFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ssdFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� dFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-dFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-dFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z �� s�-eFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-eFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�eFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�syeFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�eJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� eJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��#s�fFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�"syfFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�!e�fJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270�� e� fJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r� qwfFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� msfCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417� s� eFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�*qwgFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�)msgCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�(q�igFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�'ssfFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�&s� fFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��%s�-fFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��$s�-fFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��0s�-gFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��/s�-gFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��.s�gFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�-sygFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�,e�gJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��+e� gJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��7s�hFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�6syhFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�5e�hJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��4e� hJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�3qwhFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�2mshCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�1s� gFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 e �r+��V��: � � e D�t � 163f0d23cfe8fd01038ccb7746a4af46b5d8859204698181d3dcc73e81d8fb94D�s � ae74b02c469234e1874d6852f03edc12b68b262ee96a49590345a04f69d92c18D�r � 4e2fdfb11cf1f7b0f724741e7730e02c2e6ab6bc2b306bf41ace3283e2b8739bD�q � 1661002b4d684efd2898ed72901055d3f780eab559156150f5421b5f448d823dD�p � de133553b72273258b6a99609593572620371fffa43173a2338c8558bfa99e7eD�o � a3f82abae1cfa7453d9b8553062e87caf6acf5fab2d57ec6ba1cd09335b548f8D�n � 44c332e4f12eed26da249463f404e2a9b0a26965d3864059eabafa8b359ad304D�m � c2dee3fc80a476ec4b0960d8a193508056f424e74141e414c57914a3c8f07e86D�l � 0f15bf4e21cca58586fae47893052796624bb20d948f2087a88fa6589059216aD�k � 86d37b5ad18b07654ecb4a92153db1f1929859e2e00c1a74b0455e6a33a22949D�j � db707f9fd1fe35154ab4047938dc0ffe4a07327789e176680886a697d796b61eD�i � bd606511a1c296702ecfd01d1fa8f5651c4c51d34d4f242cd3fe75de4b25c299D�h � 5e7fbcbc653f613c746c3e1bb2b62d8fcc19ac0cf1d92487882d5541de4284c0 N m�X�4 � N r�>qwiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�=msiCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�<q�iiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�;sshFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�:s� hFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��9s�-hFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��8s�-hFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��Ds�-iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Cs�-iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Bs�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�AsyiFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�@e�iJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��?e� iJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��Ks�jFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�JsyjFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Ie�jJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��He� jJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�GqwjFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�FmsjCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Es� iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�RqwkFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�QmskCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Pq�ikFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�OssjFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Ns� jFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Ms�-jFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Ls�-jFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��Xs�-kFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Ws�-kFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Vs�kFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�UsykFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Te�kJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Se� kJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��_s�lFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�^sylFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�]e�lJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��\e� lJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�[qwlFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ZmslCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Ys� kFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�fqwmFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�emsmCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�dq�imFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�csslFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�bs� lFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��as�-lFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��`s�-lFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��ls�-mFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��ks�-mFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��js�mFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�isymFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�he�mJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��ge� mJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��ss�nFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�rsynFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�qe�nJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��pe� nJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�oqwnFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�nmsnCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�ms� mFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�zqwoFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ymsoCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�xq�ioFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�wssnFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�vs� nFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��us�-nFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��ts�-nFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z �� s�-oFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-oFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��~s�oFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�}syoFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�|e�oJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��{e� oJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s�pFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sypFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�pJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� pJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�qwpFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�mspCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�s� oFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�qwqFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n� msqCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,� q�iqFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q� sspFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419� s� pFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371�� s�-pFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-pFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��s�-qFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-qFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��s�qFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�syqFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�qJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� qJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s�rFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�syrFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�rJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� rJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�qwrFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�msrCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�s� qFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�"qwsFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�!mssCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,� q�isFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q� ssrFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419� s� rFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371�� s�-rFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624�� s�-rFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��(s�-sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��'s�-sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��&s�sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�%sysFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�$e�sJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��#e� sJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��/s�tFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�.sytFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�-e�tJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��,e� tJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�+qwtFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�*mstCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�)s� sFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�6qwuFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�5msuCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�4q�iuFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�3sstFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�2s� tFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��1s�-tFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��0s�-tFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 e �r+��V��: � � e D� � 017e2d09736a9888ed8e38dca3b1a005fcfebb65e0d3d31617fa9ba35f62526dD� � 7af718b81b8f45b39e82ed35fcd1065c8dd2f178f9310777598dc5f3544dd695D� � bdc8ab95aa96bf3f851a6cd97f2d9c878fe34101ff383e7ab7f2c5eb11a13d78D�~ � f0264bd6f2bbb5db07d005243d60a13920c116e9e1b122e88fab4886f3ff1bc8D�} � 44d06a1ca389cc452e21dee550e31d9247c635c403355f8fa7df144b76f7ee8eD�| � d8dd9b50628f10da8aacac180c1d67e558c1ea21f01087d813dcd0249e74edbdD�{ � b4cbf615b36395073b874a9c133a8bf54fd76e3016b591c08aa9bb4e0bc70679D�z � 7c3a5727b1fac7e2de0318d8d80ec9c79f8d4817cde856564f2029e02691769fD�y � c480e3a1a9b563578db18be5b147c32561044872ed18447819bf430f2cde21c2D�x � 2a85a789f09834655fede0beff4a30eea8c21356b1669e49795509c63d513254D�w � 82c766a327f786b1d8e1cf34a5ed50e63b48ed813b1e42b1cdf8bdbe7d349866D�v � f37f01eec61a287a1271577470666ad9b985aa271aa8eec00beb21627c77dd76D�u � 589b285340071ac5a04d6fc61453fbc9ef5c7d6c4d24c934c944d51787ae5966 Z {��� � Z ��<s�-uFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��;s�-uFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��:s�uFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�9syuFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�8e�uJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��7e� uJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��Cs�vFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�BsyvFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Ae�vJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��@e� vJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�?qwvFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�>msvCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�=s� uFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�JqwwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ImswCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�Hq�iwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�GssvFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Fs� vFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Es�-vFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Ds�-vFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��Ps�-wFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Os�-wFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Ns�wFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�MsywFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Le�wJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ke� wJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��Ws�xFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�VsyxFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Ue�xJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Te� xJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�SqwxFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�RmsxCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Qs� wFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�^qwyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�]msyCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�\q�iyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�[ssxFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Zs� xFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Ys�-xFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Xs�-xFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��ds�-yFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��cs�-yFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��bs�yFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�asyyFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�`e�yJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��_e� yJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��ks�zFlorian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�jsyzFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�ie�zJonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��he� zJonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�gqwzFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�fmszCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�es� yFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�rqw{Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�qms{Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�pq�i{Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�osszFlorian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�ns� zFlorian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��ms�-zFlorian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��ls�-zFlorian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��xs�-{Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��ws�-{Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��vs�{Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�usy{Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�te�{Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��se� {Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s�|Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�~sy|Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�}e�|Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��|e� |Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�{qw|Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�zms|Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�ys� {Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 of 5flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��S ��Z ��` ��g ��n ��t ��{ �� �� �� �� �� ��# ��* ��0 ��7 ��> ��D ��K ��R ��X ��_ ��f ��l ��s ��z �� �� �� �� �� ��" ��( ��/ ��6 ��< ��C ��J ��P ��W ��^ ��d ��k ��r ��x �� �� �� �� �� �� ��' ��. ��4 ��; ��B ��H ��O ��T ��Z �` �f �k �r �u �z �~ � � � � � � �! �& �, �1 �8 �; �@ �D �I �O �T �Y �\ �a �g �l �r �w �~ !� "� #� $� %� &� '� (�" )�' *�- +�2 ,�8 -�= /�D 0�G 1�L 2�P 3�U 4�[ N m�X�4 � N r�qw}Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ms}Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�q�i}Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ss|Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� |Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-|Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624�� s�-|Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z �� s�-}Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624�� s�-}Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058�� s�}Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� sy}Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�}Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� }Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��s�~Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�sy~Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�e�~Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� ~Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�qw~Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�ms~Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417� s� }Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�qwFlorian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�msCarlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�q�iFlorian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�ss~Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�s� ~Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��s�-~Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��s�-~Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z �� s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624�� s�-Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058�� s�Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t� syFlorian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y� e�Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��e� Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��'s��Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�&sy�Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�%e��Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��$e� �Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�#qw�Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�"ms�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�!s� Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 N m�X�4 � N r�.qw�Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�-ms�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�,q�i�Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�+ss�Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�*s� �Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��)s�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��(s�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��4s�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��3s�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��2s��Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�1sy�Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�0e��Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��/e� �Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��;s��Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�:sy�Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�9e��Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��8e� �Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�7qw�Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�6ms�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�5s� �Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 e �r+��V��: � � e D� � c13dc951f499e2d4af158a7e69ac636e75289d333b51e67cf3b6c1c3b573e7dfD� � 553cb086c6ccc5df943b00d1342272a201f6f00d3833176eb02708135da3101eD� � 27bc90124c2fa6f18a9edb3748c392b723f315a736b6b34038195625871ecf2bD� � abb495131866830ec1e5474b69876de363e44c471e7221b10ce992f1f526f966D� � 4aea4b143d8173155f3ca2e53011c25de372518c46da064056b3507555cdc03aD� � 87b4bf85d74acb5f568e2cb39c5b3f1c972eba5db5f0219021c385fcf2d29732D� � c80cdecf0a4d4edc4e52f018171be3aaff999a6abe4579401f05dcf51a2e2586D� � 2790ee1f2222b6bacc39245756529d819aa586d22b8f921a30392fabf1e845ccD� � 6b9b9395896aada874edc170d344039f28e922ef896e327a1058aac608e3bf71D� � f759508ca587ecc4ba720b9a7958780468e4b3259069514d52bbb9963d29f17eD� � 3d16cbc8797f49fcd4f8fd66dcd9abf0441a825f9ad6028f0548e6003c0e2366D� � 547b0510681fd163f611bd36836750eb87f43894c5f7c7b2578765bbcce090bdD� � 9408ed4cf3bb74bfe932474193ada99007d34cf9c767bbc2acddae99d4db12fe N m�X�4 � N r�Bqw�Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Ams�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�,�@q�i�Florian Müllner <fmuellner@redhat.com> - 3.28.1-7\�@- Add window-grouper extension Resolves: #1355845 - Add disable-screenshield extension Resolves: #1643501q�?ss�Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�>s� �Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��=s�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��<s�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 Z {��� � Z ��Hs�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Gs�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058��Fs��Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Esy�Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�De��Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Ce� �Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357 ~ �� ��Os��Florian Müllner <fmuellner@redhat.com> - 3.28.1-13^��- Adjust dash-to-dock for classic backports Resolves: #1805920 - Fix inconsistent state in window-list prefs dialog Resolves: #1613835 - Add accessible name to status icons Resolves: #1600999t�Nsy�Florian Müllner <fmuellner@redhat.com> - 3.28.1-12^���- Drop faulty patch from backport Resolves: #1782102y�Me��Jonas Ådahl <jadahl@redhat.com> - 3.28.1-11]�B�- A couple of fixes to the classic backports Resolves: #1778270��Le� �Jonas Ådahl <jadahl@redhat.com> - 3.28.1-10]�V�- Fix unwanted appearance of workspace switcher menu Resolves: #1752357r�Kqw�Florian Müllner <fmuellner@redhat.com> - 3.28.1-9]bx@- Make classic mode more classic Resolves: #1720286n�Jms�Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-8]M`@- Add extra-osk-keys extension Resolves: #1702417�Is� �Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371 � m�X� � �$�T� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233q�Sss�Florian Müllner <fmuellner@redhat.com> - 3.28.1-17`x*�- Override lg foreground color Resolves: #1875419�Rs� �Florian Müllner <fmuellner@redhat.com> - 3.28.1-16`@- Fix stuck window picker after screen lock Resolves: #1904371��Qs�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-15`@- Add workspace tooltips to workspace-indicator/window-list Resolves: #1901624��Ps�-�Florian Müllner <fmuellner@redhat.com> - 3.28.1-14^��- Fix workspace switch in window-list outside GNOME Classic Resolves: #1848058 T Q�� � T z�Zy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�Y� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��X� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��W� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��V� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�U� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 , ����S , �#�`� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��_� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�^�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�]yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��\y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�[w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860 Z R�� � Z y�fw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�e� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��d� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��c� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��b� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�a� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��k� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��j� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�i� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�h� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�gu[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �r� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�qyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��py�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�ow[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�ny�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�m� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��l� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�uc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�t�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�s�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��z� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�y�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�xcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�wc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�vc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�~cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�}c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�|c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�{� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; �� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+��Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J���Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�!w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�&� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��%� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�$�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�#yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��"y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�,w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�+� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��*� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��)� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��(� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�'� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��1� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��0� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�/� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�.� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�-u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �8� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�7yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��6y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�5w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�4y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�3� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��2� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 e �r+��V��: � � e D� � 92d5b94aea2121671cd099763736607349b3607d2d2e2e681811cd2f4c86ba88D� � 06444e0746003a76118ae6a9895e5592ab3c18c2bf85ab614b50a43dd56980b9D� � ccaed81377566681009e212ad6067bf7a462c3a7df25aa078d71854dc61496baD� � 6fa281a1277a0474df3c2033953900cb085700242c41a44cda525992e8b7c5c6D� � 51c06da7ce2ef116cd43474b64056e939ccb0ae0e6198dd907ee842fdc5005b9D� � ba8057e4e0424cbc1521c650fa3a07edba34cbd8e90391f5273ce5c22d55e305D� � f5037b5658870caf9db57fef7e511d690b1959170ab11cfda5aa83f814633ba2D� � 17166fc5096e5f62c88e7eff8f2e850bf452600e5d52eaf11a1dff4bc21c285fD� � 6ddc8fea6aac5d2cf395f1d06506d529fc6fde104aa7ced09ed3d16f8996db76D� � 50c11af52b9c7aba5a74a2beb07e802550af036c3a37feb00b9bfca7b241ffa1D� � 3f5208ad5e6d40b1cdbd818874e03c204f1a94371bda2f9525511fe0a0803522D� � 91c532ed3ffc0c3a3ff8c2e0c2f2eea28b1497fd586422e4640ae48504011029D� � 53dc9de016bb6fc2c1a005c20044580f8d5de2f99f77df7527b054e08cb02e1e � U{ � �Q�;c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�:�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�9�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��@� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�?�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�>cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�=c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�<c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�Dcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Cc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Bc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�A� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��I� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�H� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�G� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��F� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�E�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��O� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�N�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Mcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Lc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��K� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��J� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��T� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��S� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��R� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�Q� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�P� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�Y�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �X� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�W�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�V��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�U� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�\c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�[c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�Z�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�a� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�`� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�_�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�^cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�]c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�gw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�fy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�e� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��d� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��c� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��b� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�l� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��k� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�j�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�iyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��hy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�rw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�q� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��p� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��o� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��n� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�m� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��w� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��v� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�u� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�t� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�su[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �~� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�}yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��|y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�{w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�zy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�y� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��x� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+� �Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�"c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�!c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�'� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�&� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�%�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�$cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�#c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�-w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�,y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�+� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��*� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��)� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��(� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�2� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��1� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�0�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�/yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��.y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�8w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�7� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��6� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��5� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��4� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�3� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��=� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��<� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�;� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�:� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�9u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 e �r+��V��: � � e D�( � 3d0d4dbcbdb1f804aa9e133124ebb735a5037654221d45f8e93d4e81c3cc2f75D�' � ce893faa55582d8281001d9876f4ceaddca9de5adf25f32692196a6e85a1aa48D�& � 4c3662507f01c062009127bb3ab45ab19236e6dcc70fe08ca363713b45cf9229D�% � fede7faa428def30a78d440b2dfd020e0a972bca7601dbd552274dc2f98434c9D�$ � c03ba838a367a50725a5bad5793e263d9c1c7d7e962a29cd8e0b093cf5a0056dD�# � 2543d29db08633a435d64df84ea00c6bdfb481a55fd6621a7e31190ab94c1ddfD�" � 783b344765a19ddce5583dff7a5df7639ac3de2a002a21d71a0528d6aaae8258D�! � d80f9a89dac504f4ac37f8ea511d7ea892e9a02e191b8bf374506a66f6ff3395D� � 72b814596920effa935ebdde082d64181b5aa2f44485a058f2535c54828f931eD� � f85c959b9b36039c3d4707a5c1e73243be76f1191f9b467bae50a18a9612af31D� � 660894a2c18d390472d0f133b53c845c1ecffde9327004870721603cd1f91b48D� � 64a62730fee8363341816507f9171c57a6c6433b7c7418501dbfc6686c446190D� � 121ae3d3bc314678d6d4591403f12a7aac992b4097837f5c93e9dfa346814e6b > m�>�9 � > � �D� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�CyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��By�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Aw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�@y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�?� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��>� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�Gc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�F�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�E�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��L� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�K�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Jcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Ic��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Hc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�Pcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Oc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Nc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�M� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��U� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�T� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�S� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��R� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�Q�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��[� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�Z�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Ycc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Xc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��W� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��V� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��`� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��_� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��^� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�]� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�\� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�e�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �d� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�c�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�b��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�a� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�hc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�gc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�f�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�m� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�l� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�k�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�jcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�ic��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�sw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�ry�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�q� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��p� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��o� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��n� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�x� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��w� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�v�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�uyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��ty�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�~w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�}� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��|� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��{� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��z� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�y� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g� yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q� c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��!� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��&� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��%� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��$� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�#� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�"� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�+�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �*� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�)�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�(��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�'� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�.c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�-c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�,�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�3� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�2� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�1�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�0cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�/c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�9w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�8y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�7� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��6� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��5� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��4� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�>� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��=� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�<�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�;yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��:y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 e �r+��V��: � � e D�5 � f659cc4a3ded31fe85ee2123860696b26f1983182f66c76b6a76d0e5dc5f3d2fD�4 � 035b347d3201307242fcde833202a8aa1505b93cbfed75f9f4aa400f16f19cefD�3 � c4c001caa89f5bff6fb1c4dbee4050dbbb93bd7c79c16d2c309103992c0b7987D�2 � 104ab2ef65171e91197d612304922a2a41a03bb8e9cbd65666f2899ffca2d489D�1 � eeb0a2f82f3dc57694d35b3eaf181212193a3ecdcce63837ee1d869a138901d0D�0 � 1ffc8e6c986e1cc0d0bec287cc7ad4bbb77cd0ccc1bcb147a4d5be35dbe062eaD�/ � 311a90d5eda02bf4ce86639848bc226ee6a17f1a66b1f15375a48b77a3d6b9acD�. � 5d260748ee7254fcf65c3e3312e541e2f9883d21279926f45ee85ad44eb5b4e7D�- � 7709c0d2acd7ad42cb32f7de9cac262193958bda0a1f863ea37484f52147282aD�, � 62597c6811ab1a4372c93868c223a056ac2947a911f6b318ab3df4ead1b06de3D�+ � 9cd2077252d68212f08dd81f3353a8d296b4983fd631071221ad12978b80e2d3D�* � 9df3dd0592a54ada722f373efb2ba882dada990b05e08814608a1d5fb236de64D�) � 1b5fd99f401b83a160bcf8506fd135056203e2df730c72f49440fe457a1ec20e Z R�� � Z y�Dw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�C� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��B� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��A� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��@� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�?� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��I� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��H� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�G� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�F� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�Eu[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �P� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�OyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Ny�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Mw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Ly�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�K� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��J� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�Sc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�R�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�Q�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��X� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�W�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Vcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Uc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Tc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�\cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�[c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Zc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�Y� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��a� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�`� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�_� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��^� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�]�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��g� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�f�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ecc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�dc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��c� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��b� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��l� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��k� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��j� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�i� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�h� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�q�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �p� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�o�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�n��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�m� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�tc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�sc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�r�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�y� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�x� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�w�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�vcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�uc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�~y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�}� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��|� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��{� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��z� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y� w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f� u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � �� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�"cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�!c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W� c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��'� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�&� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�%� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��$� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�#�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��-� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�,�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�+cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�*c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��)� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��(� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��2� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��1� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��0� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�/� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�.� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�7�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �6� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�5�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�4��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�3� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�:c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�9c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�8�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�?� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�>� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�=�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�<cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�;c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 e �r+��V��: � � e D�B � ee54ecaecccdbbb8de156e19a27d770e04d61778a19ef2dc30478b7fcfe65865D�A � 664f64a4a6b87e761d7b0bc0efba577178e77a23ec390ffb222b9caee6c3206aD�@ � 557d4fb63564285a746012864ee4fa67be9d0f1756df5771b7f9380de46393c5D�? � 82932d0635147c1a6bbad3358a167d3e6f1a59a1ee3cce64d41ef8729a3f2993D�> � ebce0b46fb13981f4746adf603b6f96c83356c88ae4ed0053fdb5b506fbb97b1D�= � 63c3055a3e9d4079dcbfedfed3e049509ed10bdc0f3de7959902ff8cfcec5e9fD�< � 05a40b72da0cf303bc79e3b58cda8c7f7edb3f19a201eca57225af9a1e012bebD�; � c7a38de9170db3ea671c715e4f878f1c3731c4a067bcb77c2c9827c8cd02d694D�: � 1a506ab0d1bb5fe446384f454d2e3cccb4d626df0d87e0effd61680d6a9d026bD�9 � e769db0a6566751d86087f44601cb2aedbda527c4a514beaa8e8a1f4a9d2d02eD�8 � a4e5c86a1cca9f1fc22a2b9ee7b057a8c3cf9a4e26ee74373e8878ad6288731aD�7 � 7999b3417dab3aca80a1f8a57c6a7b9f98efab7f9c530e0131e8ee2cbd026459D�6 � 42ea2b85b1cebb4239ade45fc36a1b309a29b95be50d26bf314165428aeb66ac � a�2� � g�Ew[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Dy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�C� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��B� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��A� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��@� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� 6�e 7�h 8�m 9�s :�x ;�~ <� =� >� ?� @� A� B�! C�& D�+ E�. F�3 G�9 H�> J�D K�I L�P M�S N�X O�\ P�a Q�g R�l S�q T�t U�y V� W� X� Y� Z� [� \� ]�" ^�' _�- `�2 a�7 b�: c�? e�E g�J h�P i�U j�\ k�_ l�d m�h n�m o�s p�x q�} r� s� t� u� v� w� x�" y�% z�* {�. |�3 }�9 ~�> �C ��F ��K ��Q ��V ��\ ��a ��h ��k ��p ��t ��y �� �� �� �� �� �� �� ��" ��' ��. ��1 ��6 ��: ��? ��E ��J ��O ��R ��W ��] ��b ��h ��m ��t ��w ��| �� �� �� � e�U� � �#�J� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��I� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�H�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�GyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Fy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�Pw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�O� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��N� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��M� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��L� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�K� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��U� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��T� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�S� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�R� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�Qu[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �\� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�[yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Zy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Yw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Xy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�W� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��V� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�_c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�^�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�]�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��d� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�c�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�bcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�ac��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�`c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�hcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�gc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�fc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�e� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��m� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�l� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�k� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��j� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�i�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��s� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�r�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�qcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�pc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��o� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��n� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��x� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��w� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��v� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�u� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�t� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�}�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �|� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�{�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�z��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�y� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W� c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�~�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g� w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g� yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �"� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�!yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g� w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�%c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�$�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�#�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��*� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�)�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�(cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�'c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�&c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�.cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�-c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�,c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�+� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��3� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�2� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�1� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��0� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�/�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��9� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�8�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�7cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�6c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��5� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��4� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��>� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��=� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��<� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�;� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�:� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�C�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �B� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�A�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�@��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�?� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 e �r+��V��: � � e D�O � 504528b2f64bf9e246a93ff851b9fbf624d77355d1d57587ae1acaa4522c8fcbD�N � fa679cc7ff7900d485618ebb16638390e1b2e4a43f1278263dc8722680e307abD�M � 56b6f928a45667b9da2599adf7728717580afc5e3ce24bbe5dfa41d4e9881447D�L � 648913500d3bbad2fc637cb3b8d8bfeafa3a89bbf0fb33504657bab719b25763D�K � bd9209ce7471aae3638a5d0464764e35ae7dd88dd1526747997c8bbec7ceb786D�J � bd55b6e53bef2770d4702bf6fb6bcd13145e761a809da1a07423a7e1e3898f82D�I � de291c1622d5eebba6a97c0060a631087ecd9651815e7294c243b6f31e580508D�H � ec3383b51ed106826513f9c2945df6ff25b528b122a9b848b069c9e8d6cb5e46D�G � b929a42b8d0177a7813b33484e7fc53ee017c678c48081d067dcde010be775d9D�F � 82b2eaccefb7228d0de8dd9a88417b5a3b5cd4911bacf3931b092c0c35f16e7aD�E � 88e98b9e84008f81960ec7ef7833a591eded866cb407e6fef47c13d1ecb21d53D�D � 8ee9327d2fb76742bd611491c6f916eebd397da0976737f7b48eec36a25080b9D�C � f2ef03a6ec5037c50e7f13a6a7c2465e14b247e48ec9b158e91bbf86094e3dd1 v &Q v �W�Fc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Ec�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�D�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�K� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�J� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�I�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Hcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Gc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�Qw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Py�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�O� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��N� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��M� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��L� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�V� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��U� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�T�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�SyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Ry�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�\w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�[� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��Z� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��Y� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��X� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�W� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��a� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��`� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�_� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�^� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�]u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �h� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�gyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��fy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�ew[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�dy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�c� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��b� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�kc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�j�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�i�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��p� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�o�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ncc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�mc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�lc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�tcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�sc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�rc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�q� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��y� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�x� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�w� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��v� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�u�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�~�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�}cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�|c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��{� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��z� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+��Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J���Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W� c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q� c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V� �/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�"w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�!� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��'� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��&� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�%� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�$� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�#u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �.� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�-yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��,y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�+w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�*y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�)� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��(� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�1c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�0�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�/�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��6� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�5�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�4cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�3c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�2c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�:cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�9c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�8c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�7� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��?� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�>� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�=� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��<� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�;�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��E� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�D�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Ccc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Bc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��A� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��@� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 e �r+��V��: � � e D�\ � 938086442b2d90233bb54c18a12a65965685e408b96dafa4e36c18a4179676dfD�[ � 0d89f6cb70bf9117dfd174a86c11de319ac44c664effcaa3b959f00d436ae1a2D�Z � f566582c4354cf859dbaad8604aeac5c8344f7e81c02de69fe4124ea1537501cD�Y � 36aad460808510bfa2e38f113711d7d1b1ec88d77ddb1badbedd8829e5c8dd02D�X � 456aa067cc96e03aaa605e52a86cc973f7a8dab09337cce112097a4608dd143aD�W � c4bb36e81ea1d28a9b054d4a06f11d8ff53cc6d3f1e8523504685e0998b38dd6D�V � 27bf800e475fe735de26f8983bba34eab9261ed1b48593690d77e5bc7d0acde1D�U � 93a54cb9f013c14a0d42bbb9abed4ec7186612d1288e74148ff8fa20ccc973a6D�T � 6c1525a5d4f0e9045c028f3d1abe0c4e7e9aa2e3216a1472b79d3f60b02d135dD�S � e0b87fa8a61f451d3299d6569707241d3342eab4af1de892fd6bf8e03d5551d8D�R � 4bb74807b09db308a56c244e21970f4698de871955175c9b552234229de92f91D�Q � dc1039bae026e06f606e2a26e159743f3cf3ed19a75609cb5664372c17b4d90cD�P � 4011ecba5e1b135d1f741f84948ead212a82a060f0cf75bab01b2a37fdd319c0 ` �+� � ` ��J� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��I� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��H� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�G� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�F� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�O�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �N� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�M�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�L��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�K� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�Rc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�Qc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�P�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�W� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�V� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�U�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Tcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Sc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�]w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�\y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�[� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��Z� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��Y� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��X� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�b� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��a� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�`�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�_yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��^y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�hw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�g� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��f� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��e� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��d� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�c� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��m� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��l� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�k� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�j� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�iu[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �t� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�syY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��ry�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�qw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�py�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�o� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��n� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�wc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�v�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�u�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��|� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�{�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�zcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�yc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�xc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�~c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�}� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; �� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+��Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J���Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�#w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�"y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�!� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�(� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��'� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�&�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�%yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��$y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�.w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�-� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��,� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��+� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��*� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�)� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �[ � �V�2�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�1�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �0� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213f�/u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 P +PZ � P �"�7�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�6cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�5c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�4c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�3c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 p hAf p �r�;c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�:c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�9� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��8� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240 � ��^7 � �*�@� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�?� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��>� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�=�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�<cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705 5 b�5? � 5 �"�F�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Ecc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Dc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��C� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��B� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��A� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 e �r+��V��: � � e D�i � 3cd32436440b9a64a4f9971f907fba98209aeed82000b3d7441689e93ed58cb6D�h � 3ea9a16edeb166326b2db578b5d4fbc8f9700179808b798dd4c33c6f0d273beaD�g � 573cc1166190452dbe3b43b1be7bef29a1ffa0ed9f8dbfd29b063674c60834d3D�f � 78d3877b596cc832e4549e218cae35c884640fcb1d8e5764ee09a774a110fb45D�e � b301b3885fb4d5b57bd90b729ff75d74dc31e2f35a8ae3b5efa64901202f1497D�d � 81c536f389863d868ed8bc21eae1b2225ce8631429c5df133d0e769c3f340f77D�c � 324c9d5ad49eb48866d128a022079508c40c45aa4d4176abc382f606369448d0D�b � 7179cfedeaf917db1ff4e9e2c9261746c977c39ff98d06e7bed342cca2633c45D�a � 20d48e214a59a2848b7152ea8c378eda0ab10d93902bef3627ec70603b8ad96fD�` � 1b94bec42529799dff727dd6082c4b038c96227041b81d95f21ee5457cb4c089D�_ � 4ed29d175fb03385533dbaacc9824611743ebcc84d3ce5fa6f376a5568058d49D�^ � 9a5aad884099ccb669c4d020f69ddfec584bec4cb676f93818cd67346ee348d0D�] � 7d9adf9e27536faf7c726121ff0e58d8a0d0c473168713c55c95d74da74c2ebf Z hA� � Z ��K� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��J� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�I� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�H� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��G� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240 / n�o � / � �P� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�O�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�N��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�M� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��L� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�Sc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�R�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�Q�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 % %/�% �"�W�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Vcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Uc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Tc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 [ �)� � [ ��\� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��[� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��Z� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�Y� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�X� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 $ N�g�b � $ ��c� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�b�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�ayY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��`y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�_w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�^y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�]� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 ` �+� � ` ��h� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��g� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��f� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�e� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�d� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 � O�jB � �+�m� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�l� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�ku[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860y�jw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�i� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 � a�2� � g�sw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�ry�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�q� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��p� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��o� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��n� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�j� �'�w�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �v� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�uyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��ty�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 v &Q v �W�zc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�yc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�x�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 A � h A �#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��~� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�}�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�|cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�{c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � %/�% � ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W� c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 ` �+� � ` �� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 A � h A �#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � R�� � �-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �r � �'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+��Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J���Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259 v &Q v �W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a� cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�%w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�$y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�#� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��"� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��!� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�*� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��)� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�(�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�'yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��&y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�0w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�/� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��.� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��-� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��,� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�+� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��5� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��4� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�3� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�2� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�1u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �<� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�;yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��:y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�9w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�8y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�7� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��6� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�?c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�>�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�=�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��D� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�C�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Bcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Ac��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�@c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�Hcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Gc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Fc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�E� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 e �r+��V��: � � e D�v � b4fb6c1de92fa5a737add5cf91cb77255e46b3c6bd53cb56fb0440dba5b32f9dD�u � 00608301be4450298d9a4f75fc3a36ab657c6083731a7fe1510fb0044564bb52D�t � 81c248f72126ea7b1e33a7f47a8133ab505675f4db87438422eb0a47bb6f2bf0D�s � 82bf486bffe227eaa4681fdcf6cb4c2225d25b5dbdad8b4009f3da4a506834efD�r � 6457ba14ffee5554b41e56b32c8a9f8c2873e5ebe04d17cbb12e0e3e6edd3933D�q � 201819cd83614093dbe14240fec542722aadee2886e13b2006ee8f6f0c063950D�p � bbc7199164da8d3b64fe85a385ca152120db612e702d3318ac67877b9c25e534D�o � 6a3415f454a536cd4bddf7dbc03ff8c17e3484e1d6e9df356fd2660f6f7a96b3D�n � 2e5c474731992282d7faabe7c8d55f7253fbce05507a987f3bd332681c4e839cD�m � 97484ec3860cbfbbd5c2af0639469ee8d66a3f43238adbf11b9b14a0c86c978aD�l � 37726d4a426ccbdf697e55aa4f02f394d32283a3df6de51d99714a596409ae64D�k � e446b1822c2b1f232e747d463041aa38f581221d371740705042a6966578d818D�j � 87c30f42a079f461de618eaafd1eeb3225bf684cb0b4fe11da401f0550be3c80 O Z�� � O ��M� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�L� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�K� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��J� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�I�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��S� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�R�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Qcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Pc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��O� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��N� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��X� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��W� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��V� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�U� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�T� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�]�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �\� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�[�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�Z��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�Y� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�`c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�_c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�^�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�e� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�d� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�c�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�bcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�ac��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�kw[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�jy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�i� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��h� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��g� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��f� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�p� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��o� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�n�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�myY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��ly�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 of !flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �� �� �� ��# ��( ��. ��2 ��7 ��; ��@ ��F ��K ��P ��S ��W ��\ ��c ��h ��m ��s ��w ��z �� �� �� �� �� �� �� �� ��% ��* ��0 ��5 ��< ��? ��D ��H ��M ��S ��X ��] ��` ��e ��k ��p ��v ��{ �� �� �� �� �� �� �� ��# ��& ��+ ��1 ��6 ��< ��A ��H ��K ��P ��T ��Y ��_ ��d ��i ��l ��q ��w ��| �� �� �� �� �� �� �� �% �* �/ �2 �9 �@ �H �P �X �` �g �o �w � � � � � �( �0 �9 �A �I �P �X �a �i �q �x � Z R�� � Z y�vw�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�u� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��t� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��s� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��r� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�q� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��{� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��z� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�y� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�x� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�wu[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�~y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�}� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��|� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � �� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"� �G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r� c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W� c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` �� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240�� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�#�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �"� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�!�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�&c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�%c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�$�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�+� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�*� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�)�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�(cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�'c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�1w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�0y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�/� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��.� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��-� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��,� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�6� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��5� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�4�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�3yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��2y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�<w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�;� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��:� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��9� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��8� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�7� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��A� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��@� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�?� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�>� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�=u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �H� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g�GyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��Fy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g�Ew[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�Dy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�C� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��B� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 e �r+��V��: � � e D� � 8ff288d2044bc096fa50399fcc642f5cb7c09ba23f131fb8b2386f6228076ff1D� � dfe598bbcefc64fd6bb542cf6d1966fef6a3995e68fa2b6cc2ed34220ca65ee8D� � c0e72c1dbf2c72f272577dc891736d1403dd928b5e9f236721ea261f99677b61D� � 1e1c43fd5f02a819df67f4ea70bbc1d3725d96664de7ae2da966f9456b5ececfD� � dfcf30fce1599be0699955042c34db80273d1dc14cc38af5a8f91b02ab70060bD�~ � 40778cececacdc153601f3e0bdde3c295376d9e7a17eef328a28fd1f1d7e2f2eD�} � 764b6da4f9a89bd034bdb5f3c7e3d13f7fcd081d64b01ef179ecd51b31ec0e20D�| � 82d9617a439490782837e05a5e05310b0748f064a0556d264fbc615afd85671bD�{ � 63a16686d243cda459362fe273e2bf3e64a84899038415039c265f34388b8257D�z � 0eb359490eab964f970cb8d6fd9987a38a3e3f9c585348941c53fb1b709c71f1D�y � a4dd90b3a38f048451db9452be71e7a4b4d0cfa945c1fb18335881ddf88355f3D�x � f020458306c1798b97bbe293da7347160996bd9a1e89d548f4012bde28cc4a52D�w � 86614c497d063d072a270460ce1367ee6647bfa57eb10ec1f02b27e267bfff67 � U{ � �Q�Kc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�J�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'�I�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��P� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�O�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�Ncc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Mc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Lc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�Tcc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�Sc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�Rc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�Q� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O ��Y� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�X� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�W� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��V� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�U�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��_� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�^�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�]cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�\c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��[� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��Z� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��d� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��c� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��b� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�a� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�`� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�i�Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �h� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�g�Y�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�f��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�e� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�lc�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�kc�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�j�/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 ) � � ) �+�q� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�p� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�"�o�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�ncc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�mc��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � a�2� � g�ww[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z�vy�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.�u� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��t� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��s� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��r� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240 � e�U� � �#�|� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233��{� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�z�G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987g�yyY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733��xy�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733 Z R�� � Z y�w�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.e7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�-�� �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148�� � ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��~� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�}� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240 � �o�! � ��� �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��� �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�+�� �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�$�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233f�u[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.e7.9bB�- Bump for signing - Resolves: #1892860 > m�>�9 � > � �� �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213g� yY�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.11ct�- Bump sbat - Resolves: CVE-2022-28733�� y�7�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.10c#�- Backport the relevant CVE fixes from the 2022-05-24 drop - Resolves: CVE-2022-28733g� w[�Robbie Harwood <rharwood@redhat.com> - 2.02-087.el7.9bB�- Bump for signing - Resolves: #1892860z� y�Robbie Harwood <rharwood@redhat.com> - 2.02-0.87.el7.8b(��- Fix accidental reboot in grub_exit - Resolves: #1892860�.� � �Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148��� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298 � U{ � �Q�c�A�Peter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V��/�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765�'��Q�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019 � %/�% � ��� � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 � �� � a�cc�Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�c��Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705�W�c�M�Peter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�#�� �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 O Z�� � O �� � �+�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*� � �K�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#� � �=�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233�� � � �Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"��G�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987 ; e��y � ; ��%� � Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.1_� �- Fix keyboards that report IBM PC AT scan codes Resolves: rhbz#1892240�"�$�G Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�#cc Peter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�"c� Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705��!� ��Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298�� � �%�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240 ` �+� � ` ��*� � Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.6`B @- Fix ppc64le performance issues (diegodo) Resolves: rhbz#1759298��)� �% Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.5`@�- Add the at keyboard patches that weren't included Resolves: rhbz#1892240��(� �+ Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.4`@�- add keylayouts and at_keyboard modules to EFI binary Resolves: rhbz#1892240�*�'� �K Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.3`?z@- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich) Resolves: rhbz#1892240�#�&� �= Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.2`8�- Fix another batch of CVEs Resolves: CVE-2020-14372 Resolves: CVE-2020-25632 Resolves: CVE-2020-25647 Resolves: CVE-2020-27749 Resolves: CVE-2020-27779 Resolves: CVE-2021-20225 Resolves: CVE-2021-20233 OR � �'�/�QJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.81]{��- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64 Resolves: rhbz#1748019� �.� Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.80\�e�- Rebuild with correct build target for signing Resolves: rhbz#1693213�+�-�YJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.79\�@- Ignore the modification time when doing RPM verification of /boot/efi files Resolves: rhbz#1496952�J�,�Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78\�+@- Prevent errors from diskfilter scan of removable drives Resolves: rhbz#1446418 - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file Resolves: rhbz#1497918 - Remove glibc32 and glibc-static(x86-32) BuildRequires Resolves: rhbz#1614259�-�+� �Q Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.e7.7`�Z�- Fix boot failures in ppc64le caused by storage race condition (diegodo) Resolves: rhbz#1942148 v &Q v �W�2c�MPeter Jones <pjones@redhat.com> - 2.02-0.84_ p@- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�Q�1c�APeter Jones <pjones@redhat.com> - 2.02-0.83_�@- Fix several CVEs: Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311�V�0�/Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82^x��- Prepend prefix when HTTP path is relative - efi/http: Export {fw,http}_path variables to make them global Resolves: rhbz#1616395 - efi/http: Enclose literal IPv6 addresses in square brackets - efi/net: Allow to specify a port number in addresses - efi/ip4_config: Improve check to detect literal IPv6 addresses - efi/net: Print a debug message if parsing the address fails Resolves: rhbz#1732765 # � � � # l�9guRobbie Harwood <rharwood@redhat.com> 0.7.0-24\��@- Add a safety timeout to epoll - Resolves: #1687899y�8g� Robbie Harwood <rharwood@redhat.com> 0.7.0-23\��- Use pthread keys for thread local storage - Resolves: #1618375q�7gRobbie Harwood <rharwood@redhat.com> 0.7.0-22\��- Add hack to support read-only root - Resolves: #1542567{�6g�Robbie Harwood <rharwood@redhat.com> 0.7.0-21[o�- Always choose highest requested debug level - Resolves: #1505741�"�5�GJavier Martinez Canillas <javierm@redhat.com> - 2.02-0.87_C��- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB Resolves: rhbz#1869987a�4ccPeter Jones <pjones@redhat.com> - 2.02-0.86_ ��- Fix a mis-merge Related: CVE-2020-15705�r�3c�Peter Jones <pjones@redhat.com> - 2.02-0.85_ ��- Couple more late fixes. Resolves: CVE-2020-10713 Resolves: CVE-2020-14308 Resolves: CVE-2020-14309 Resolves: CVE-2020-14310 Resolves: CVE-2020-14311 Resolves: CVE-2020-15705 � �u�r � � b�@ceRay Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574� �?g�Robbie Harwood <rharwood@redhat.com> 0.7.0-30`�Z�- Always free ciphertext data in gp_encrypt_buffer - Resolves: #1887438w�>g� Robbie Harwood <rharwood@redhat.com> 0.7.0-29^��- Make syslog of call status configurable - Resolves: #1373421��=g�%Robbie Harwood <rharwood@redhat.com> 0.7.0-28]�m�- Fix double free of popt context when querying version - Resolves: #1752810��<g�+Robbie Harwood <rharwood@redhat.com> 0.7.0-27]5�@- Update docs to reflect actual behavior of krb5_principal - Resolves: #1553094� �;g�Robbie Harwood <rharwood@redhat.com> 0.7.0-26\Ɋ@- Avoid uninitialized free when allocating buffers - Resolves: #1699331x�:g� Robbie Harwood <rharwood@redhat.com> 0.7.0-25\�8�- Fix explicit NULL deref on some enctypes - Resolves: #1699331 e �r+��V��: � � e D� � fbfc27e8e45f88c94b069c77e301bd007e2e4c2d7e71b268fcaa0c9bee8f84a6D� � dee28e194d7127f17697a1e4475e1ffb525b9887c34d90564152f147605360acD� � c697cda85543d0498850f1a43781d8a7a9027a93e2d04cb19345ead2d9caab5cD� � f7c28e4b2e40bd7978b5bd740987494914a4fb3430ca45bea2cc9a5f94c01b50D� � 4459ade066985609ab1ac51574d24bb466645a717a2ff3a30e417a8b91609a87D� � 4c591b2e577a321d2a3be5e390eecceec9fe2e18c4d4f269ef41f4ecb0ef6c0cD� � 052c8eb21db8776433111192ff5a74c5160dfebb1bfcc701324165599256b321D� � 62ccf282c2df0d4b0fb164fedda7d42b0e9be1966f8da03fdcebfb08cf4e5456D� � e6abdcee27c8de20b83368d087e14b888bef04262eb07ab80e58e528334e1a1cD� � 2468aa7b84cd02bdd3dadf04f5dd64bbffc5ae57ff7ef4a973bc74b29757bf6fD� � 677cbb3bd9f4a461b86460be4a5a9ef23ab126d06907725c3ffe789009559936D� � 73c486ff61695559ce4daae66d613f19b44873db66b308ac0f3d693c35e6bc5cD� � ce776b97b4d788033910fe00975ced115a86f293d3c25e4ef91029227b0d3a15 ` t�D�R � ` c�H_kDavid King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��G_�3David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)c�F_kDavid King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��E_�3David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�DceRay Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574b�CceRay Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�B_kDavid King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��A_�3David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215) a �6�D�R � a ��P_�3David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�Oce Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�N_k David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��M_�3 David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)c�L_k David King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��K_�3 David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�Jce Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574b�Ice Ray Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574 � �5�C�R � � b�XceRay Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�W_kDavid King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��V_�3David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�UceRay Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�T_kDavid King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��S_�3David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215)b�RceRay Strode <rstrode@redhat.com> - 3.22.30-6_�P�- Fix leak on VT switch Resolves: #1882574c�Q_kDavid King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195) e �r+��V��: � � e D� � dacb7b788cec2e57fc23d0ff804942ec81a7a415eee8eca5a9a61540c86d896aD� � 4634b74cfe7dbc9b83774cbbc50314221241227045a9199072df357ddda72bf3D� � 28f3ff68224de0783083894b44eefc57e4833a53461ce91f1f4656bbc1b0eb9fD� � 717c6856842ddb6b4eca2817cbb3adfce002d371a61b322c8c74761e57ae5bcfD� � bc77febf9b5e706cc4d68361638309818761fa19dfe82ca91496f40a23d81bacD� � ecb7f8d19fb659a35a4a25d22a891cfd89fd55cc12d791df222c33eba1c9dbdbD� � 160346449f601718afb8de2d7f7e0aeb2ac8a5f4e2163d2f74d1b98233db4002D� � d5da28b2cc382844aa578c0eb19c23535d011518b699a177d00f377554f5c80aD� � 86993bde440204eca01ab08264c50ea2e67b216b8b0460a9abd7ed1e48864926D� � 835e86766eabc1d9ae0e8b151d9721a415b5dfdc6b9dc31497b790dc7f51e60dD� � aaa642c4d8ab309bd427dfe250bcf2154390e1fe39eeec98c816058e6da39c2fD� � 42f1179fa155a1a3b4448c2b7429ab632d2e5b7216612cb0f5458e96d9c9e738D� � a20718245cbc3ce096de1da99acc9aadce7082881bcdc0b1576352b2959e8db8 A t�} � � A M�`_?Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24M�__?Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��^y�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news��]y�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��\y�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsV�[y7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valac�Z_kDavid King <dking@redhat.com> - 3.22.30-8b ��- Further treeview a11y refcount fix (#1965195)��Y_�3David King <dking@redhat.com> - 3.22.30-7a�Z@- Fix treeview a11y refcounting (#1965195) - Avoid cellarea resize crash (#1962215) � | �#�. � ��gy�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��fy�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsV�ey7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat�dg�Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706p�cg}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l�bguBastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985� �aq�Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451 � d�@�^ � � V�oy7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat�ng�Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706p�mg}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l�lguBastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985� �kq�Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�j_?Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24M�i_?Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��hy�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news & d�,�� � & p�wg}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l�vguBastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985� �uq�Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�t_?Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24M�s_?Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��ry�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news��qy�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��py�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news 8 �0��\ � 8 � �q�Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�~_?Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24M�}_?Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��|y�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news��{y�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��zy�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsV�yy7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat�xg�Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706 * � �N� z * M�_?Daniel Mach <dmach@redhat.com> - 0.20.3-2R�k�- Mass rebuild 2013-12-27��y�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.3-1Q�?@- 0.20.3 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news��y�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.2-1QiH�- 0.20.2 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news��y�9Peter Robinson <pbrobinson@fedoraproject.org> 0.20.1-1Q5�@- 0.20.1 release - http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.newsV�y7Peter Robinson <pbrobinson@fedoraproject.org> 0.20.0-2Q& @- Obsolete gupnp-valat�g�Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706p�g}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l� guBastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985 1 �,�J�u � 1 a�_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�_�Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[� _[Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993t� g�Bastien Nocera <bnocera@redhat.com> - 1.0.2-6`�[�+ gupnp-1.0.3-3 - Fix DNS rebind issue - Resolves: #1964706p� g}Richard Hughes <rhughes@redhat.com> - 1.0.2-5[)�+ Update to latest upstream version - Resolves: #1569980l� guBastien Nocera <bnocera@redhat.com> - 1.0.1-1X� @+ gupnp-1.0.1-1 - Rebase to 1.0.1 Resolves: #1386985� � q�Debarshi Ray <rishi@fedoraproject.org> - 0.20.13-1UlI@- Update to 0.20.13 and re-enable vala bindings Resolves: #1225451M�_?Daniel Mach <dmach@redhat.com> - 0.20.3-3R�U�- Mass rebuild 2014-01-24 �$N�Z � � q�_�Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�_[Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993e�_oOndrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_�Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_�Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_�Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302) " �0�T~ � " e� _oOndrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|� _�Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r� _�Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�GOndrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^� e[Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_�Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�_gOndrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_wOndrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 " �0�T~ � " e�(_o Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�'_� Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�&_� Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�%_�G Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�$e[ Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�#_� Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�"_g Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�!_w Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256 < �3�c�� � < r�0_� Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�/_�G Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�.e[ Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�-_� Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�,_g Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�+_w Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256T�*_M Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�)_� Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816) / ��L�z � / x�9_� Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�8_g Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�7_w Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�6_� Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�5_[ Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�4_M Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�3_� Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�2_o Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�1_� Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) e �r+��V��: � � e D�* � 527d093e43a30a0f0ec3101a8926eeba2b14e4496c495e70a1d5a3ceca45adbdD�) � 34a08308f948f94b0ad18d9d233e22453d984465c89a58935ec1185d071e7f4dD�( � 0b42148789300af59e74814b7d8cb50a3c1453dc197a498f2f37cdc75a6a97d7D�' � 8453856c66fc79e7ec946e471ab4cddd8112886e40b99a72093c616592b2258fD�& � 938d5007ce1dff2b3235913a2a5efe8141b51ff690ea6d5b59b6289df55ab4f8D�% � b95af4b262010256013a4265ab61dfb37bf37e1d4ca12de8b007b315ae8a9b1cD�$ � 51af7b29f1554b6ee4cfc1be4f18e91dcb17d8795d87ad960cb26d3fe381cc64D�# � 8fbe338dd8adc0ef568214985a4b86d964a490b7b5eb963f88ed406169b64c43D�" � 35f5c229e131ffb525fc38628dbe4dc399fd7f6077f047e169dc8e5ddcce20e8D�! � 9f51218b8454129029c134ac7b8c3cfdae6f1bd1938cb010314534defd013717D� � cce9b9d8e55d003cd7be906f5603d626c0f14b8e422e5123076eb85b9dab7694D� � b716a9548efd53a938625df1910ca436cae1cbf92940422987c01ae7cbb040e3D� � dc73b498dea020241c15f040008e6f96731b9a67cfa83b452c60a9d4510edd41 " ��T�m � " x�A_� Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�@_g Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�?_w Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�>_o Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�=_� Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�<_� Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�;_�G Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�:e[ Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 B ��T�m � � B [�I_[ Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�H_M Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�G_� Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�F_o Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�E_� Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�D_� Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�C_�G Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Be[ Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 � � �A� � r�P_� Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�O_�G Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Ne[ Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�M_� Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�L_g Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�K_w Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�J_� Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993 " ��I�m � " r�X_�!Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�W_�G!Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Ve[!Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�U_�!Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�T_g!Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�S_w!Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�R_o Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�Q_� Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) / ��L�z � / x�a_�"Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�`_g"Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�__w"Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�^_�"Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�]_["Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�\_M!Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�[_� !Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�Z_o!Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�Y_�!Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) " ��T�m � " x�i_�#Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�h_g#Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�g_w#Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�f_o"Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�e_�"Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�d_�"Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�c_�G"Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�be["Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 B ��T�m � � B [�q_[$Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�p_M#Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�o_� #Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�n_o#Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�m_�#Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�l_�#Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�k_�G#Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�je[#Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 � � �A� � r�x_�$Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�w_�G$Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�ve[$Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�u_�$Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�t_g$Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�s_w$Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�r_�$Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993 � ��G�w � � ^� e[%Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_�%Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�~_g%Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�}_w%Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�|_�%Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�{_[%Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993e�z_o$Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�y_�$Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) " *�6�b � � " ^�e[&Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_�&Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�_g&Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w&Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�_o%Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_�%Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_�%Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G%Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) 1 *�6�X � 1 a�_g'Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w'Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256T�_M&Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s� _� &Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e� _o&Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|� _�&Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r� _�&Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�G&Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) % �$N�Z � | % T�_M'Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�_� 'Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�_o'Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_�'Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_�'Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G'Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�e['Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_�'Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302) 7 �.�^�� � 7 r� _�(Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�G(Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^� e[(Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x� _�(Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a� _g(Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w(Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�_�(Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�_[(Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993 � ��G�w � � ^�(e[)Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�'_�)Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�&_g)Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�%_w)Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�$_�)Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�#_[)Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993e�"_o(Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�!_�(Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) " *�6�b � � " ^�0e[*Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�/_�*Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�._g*Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�-_w*Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�,_o)Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�+_�)Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�*_�)Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�)_�G)Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) 1 *�6�X � 1 a�8_g+Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�7_w+Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256T�6_M*Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�5_� *Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�4_o*Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�3_�*Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�2_�*Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�1_�G*Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887) e �r+��V��: � � e D�7 � 78de7ead3aa002c4e670d2a6bb86af61059a4efe2b86257958242df65bc50d42D�6 � 3cf6225627d15b57e6db240be4821a47a55d2bf482e4fe8f1928862282e7998eD�5 � 073a61debf16645920e116641fcf09bdcef80147f54754057c18515f5ebe1f8cD�4 � 09277f1295e2db1f4f90bd3fce359dd8150009233cbba997650480e544b67766D�3 � 474549f2d0c95b83d89f1d651d078459863a9e1f202ab7c4c64e77e2735fab8aD�2 � b9b11e2c45c327237aea9d0fd84d0d41db9d2a4137822d95f71cedd3ae9145c2D�1 � 858c36d8de6e26caf93ad7dc07224b2b333fcf1617a211b7303e44cdd15a6f3dD�0 � cc2af8b460ae945f1afdf5f03ea0b48e40aa3372a33d96e0408d1256c8c0294eD�/ � a0b60429c7fcd5fba41b9a28504facb63c1539487333911e73e7e2b166b38981D�. � 96f852d003908ae51e7c33a2d18e329760dd559b5ca3c8a594e3d2a5ebf41ce5D�- � 2590f93594e0978b11599b182212244c231fcb0808dff97b691b518fbd531adaD�, � 72fedcf3bf921b3e8efb6e27a94cc4edfe624334e5b7a143442d707cfb625b06D�+ � 93d59adb2af4416388006f622bdf8c0f758944b16c04ac683b05b66a90cd48c7 % �$N�Z � | % T�@_M+Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�?_� +Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�>_o+Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�=_�+Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�<_�+Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�;_�G+Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�:e[+Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�9_�+Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302) 7 �.�^�� � 7 r�H_�,Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�G_�G,Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Fe[,Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�E_�,Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�D_g,Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�C_w,Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�B_�,Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�A_[,Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993 " ��I�m � " r�P_�-Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�O_�G-Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Ne[-Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�M_�-Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�L_g-Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�K_w-Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�J_o,Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�I_�,Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) / ��L�z � / x�Y_�.Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�X_g.Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�W_w.Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�V_�.Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�U_[.Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�T_M-Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�S_� -Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�R_o-Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�Q_�-Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) " ��T�m � " x�a_�/Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�`_g/Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�__w/Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�^_o.Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�]_�.Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�\_�.Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�[_�G.Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�Ze[.Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 B ��T�m � � B [�i_[0Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�h_M/Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�g_� /Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�f_o/Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�e_�/Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�d_�/Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�c_�G/Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�be[/Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 � � �A� � r�p_�0Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�o_�G0Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�ne[0Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�m_�0Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�l_g0Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�k_w0Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�j_�0Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993 " ��I�m � " r�x_�1Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�w_�G1Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�ve[1Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�u_�1Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�t_g1Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�s_w1Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�r_o0Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�q_�0Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) / ��L�z � / x�_�2Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a� _g2Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w2Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�~_�2Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�}_[2Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�|_M1Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�{_� 1Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�z_o1Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�y_�1Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) " ��T�m � " x� _�3Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�_g3Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w3Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�_o2Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_�2Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�_�2Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G2Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�e[2Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 B ��T�m � � B [�_[4Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�_M3Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�_� 3Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�_o3Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|� _�3Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r� _�3Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�G3Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^� e[3Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 � � �A� � r�_�4Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�_�G4Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�e[4Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x�_�4Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�_g4Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w4Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�_�4Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993 " ��I�m � " r� _�5Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R� _�G5Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^� e[5Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268x� _�5Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a� _g5Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�_w5Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�_o4Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�_�4Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) / ��L�z � / x�)_�6Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�(_g6Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�'_w6Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256q�&_�6Ondrej Holy <oholy@redhat.com> - 1.30.4-2X�PA- Add explicit gvfs-client requirements - Resolves: #1386993[�%_[6Ondrej Holy <oholy@redhat.com> - 1.30.4-1X�P@- Update to 1.30.4 - Resolves: #1386993T�$_M5Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�#_� 5Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�"_o5Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�!_�5Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237) " ��T�m � " x�1_�7Ondrej Holy <oholy@redhat.com> - 1.30.4-5Z��- Fix network backend crashes when creating proxy failed (#1465302)a�0_g7Ondrej Holy <oholy@redhat.com> - 1.30.4-4Y��- Rebuild against newer libgphoto2 (#1500216)i�/_w7Ondrej Holy <oholy@redhat.com> - 1.30.4-3X���- Handle SecurID password prompt - Resolves: #1440256e�._o6Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�-_�6Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�,_�6Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�+_�G6Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�*e[6Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 � ��T�m � � T�8_M7Ondrej Holy <oholy@redhat.com> - 1.36.2-7b�U�- Fix unapplied patch (#2093816)s�7_� 7Ondrej Holy <oholy@redhat.com> - 1.36.2-6b�x@- Use O_RDWR to fix fstat when writing on SMB share (#2093816)e�6_o7Ondrej Holy <oholy@redhat.com> - 1.36.2-5`��- Fix udisks2 volume monitor leaks (rhbz#1944813)|�5_�7Ondrej Holy <oholy@redhat.com> - 1.36.2-4^�1�- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)r�4_�7Ondrej Holy <oholy@redhat.com> - 1.36.2-3\f��- Force NT1 protocol version for workgroup support (#1619719)�R�3_�G7Ondrej Holy <oholy@redhat.com> - 1.36.2-2\R�@- Prevent spawning new daemons if outgoing operation exists (#1632960) - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)^�2e[7Kalev Lember <klember@redhat.com> - 1.36.2-1Z�@- Update to 1.36.2 - Resolves: #1569268 e �r+��V��: � � e D�D � 95e6995373810d5b756222856d1b5d2f7d82bcb15022cc12282cbc282404516fD�C � c1f39d4de68160899478e6a3a13d87ca0cbb510af261d0319a2c3f3690cf263fD�B � bc29e9309d0d6c8bcbf454c1d73fd5eda133e3cd0a96c01283bd3c2830a03310D�A � 233182440f451ea41600279219e708b82494832752dd921ec2f2e4c0ab2a7353D�@ � d39fb02417c772d1ee5c9eb6d9a3981e59719475b6865e25c7e431882fec497bD�? � fd358c591bdefefe4f8f4b730734f8e570c3f50680413739ef8785c99d73fdddD�> � 12aa178b2c59b3f4c2d815f73b977ffeb7703da8b0da0e7a3a6f02c9aebee2a4D�= � ace18d3c4c3acb71a8d4c5a6930f0ae58e655462938d91d3ef45aef7694df479D�< � 79eacef92a2947aefaab902e53fada60dc27d9c173b1e175f1ce4db04d6c653eD�; � 59b2eac344b965618bc03745e27bb5c92278b9fa7c3a6327c3f89fdda6289a54D�: � eb18e0e118e44349b3d8917b223e6ca7e2331d41d2e49ec2e8a65f091985bfb7D�9 � f94ef4ce18a021edb2b5a72fc87092d88e8c7b4aac3c605213fea20cdeefb002D�8 � a38a894774d443bd314d09acaa9ee6056116e25f757c9e76290fe30450b9ca95 h�A�j J�>Y?8Daniel Mach <dmach@redhat.com> - 1.5-7R�U�- Mass rebuild 2014-01-24J�=Y?8Daniel Mach <dmach@redhat.com> - 1.5-6R�k�- Mass rebuild 2013-12-27��<c�+8Petr Stodulka <pstodulk@redhat.com> - 1.5-5R� �- fix issue with nonblocking open for PAR and OFL file Resolves: rhbz#1028052��;��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5-4Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild� �:W�A8Daniel Drake <dsd@laptop.org> - 1.5-3P�6@- Fix "gzip --rsyncable" functionality by removing a spurious blank line from the patch.��9��8Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild ) ���c � � ) d�Eak9Ryan O'Hara <rohara@redhat.com> - 1.5.18-3Wi,@- Fix TCP user timeout patch for 1.5.18 releasel�Da{9Ryan O'Hara <rohara@redhat.com> - 1.5.18-2Wb��- Add TARGET to install-bin for haproxy-systemd-wrappera�Cae9Ryan O'Hara <rohara@redhat.com> - 1.5.18-1WaC@- Update to stable release 1.5.18 (#1344012)��Bg�%8Jakub Martisko <jamartis@redhat.com> - 1.5-11b^�@- fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271�)�Ag�m8Jakub Martisko <jamartis@redhat.com> - 1.5-10Y�z�- doc change: missing grep options are now mentioned in the zgrep man pages/help message Resolves: #1437002V�@cM8Petr Stodulka <pstodulk@redhat.com> - 1.5-9X�f@- fix zfoce Resolves: #1382054� �?c�38Petr Stodulka <pstodulk@redhat.com> - 1.5-8U�- Gzip overwrite existing files when user choose "no" on yes/no question. It's due to wrong dupicit declaration of yesno() function in gzip.h which is compiled wrong with -O2 option. Resolves: rhbz#1201689 � ��I�d � � V�Ms=:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S�- Resolves: rhbz#1125544j�Les9Ryan O'Hara <rohara@redhat.com> - 1.5.18-9.1`��@- Fix health checks for flapping servers (#1947750)|�Ka�9Ryan O'Hara <rohara@redhat.com> - 1.5.18-9\v{�- Detect down servers with mutliple tcp-check connect rules (#1677420)c�Jai9Ryan O'Hara <rohara@redhat.com> - 1.5.18-8[Xf@- Build with USE_GETADDRINFO option (#1598491)]�Ia]9Ryan O'Hara <rohara@redhat.com> - 1.5.18-7Z �- Rebuild with openssl-1.0.2k (#1509139)l�Ha{9Ryan O'Hara <rohara@redhat.com> - 1.5.18-6Y#@- Use KillMode=mixed in systemd service file (#1444709)q�Ga�9Ryan O'Hara <rohara@redhat.com> - 1.5.18-5X�~@- Use soft-static allocation for haproxy UID/GID (#1386130)q�Fa�9Ryan O'Hara <rohara@redhat.com> - 1.5.18-4X,J@- Return correct exit codes from systemd-wrapper (#1391990) � l�j� � � o�Sso:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�Rs�W:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�Qs�:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�Psm:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �Os�):Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��Ns�/:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056 p ��_r � p n�Zsm;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �Ys�);Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��Xs�/;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056V�Ws=;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S�- Resolves: rhbz#1125544��Vu�;:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��Uu�:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�Ts�:Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983 :� � ��`u�;;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��_u�;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�^s�;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�]so;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�\s�W;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�[s�;Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056 � l�j� � � o�fso<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�es�W<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�ds�<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�csm<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �bs�)<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��as�/<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056 = ��_�? � = n�msm=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �ls�)=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��ks�/=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056��ju� <Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a�@- Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193��iu�;<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��hu�<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�gs�<Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983 :� � ��su�;=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��ru�=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�qs�=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�pso=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�os�W=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�ns�=Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056 t��� � �$�zs�W>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�ys�>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�xsm>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� �ws�)>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��vs�/>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056V�us=>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S�- Resolves: rhbz#1125544��tu� =Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a�@- Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193 o ���� o � �s�)?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992�� s�/?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056V�s=?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.2S�- Resolves: rhbz#1125544��~u�;>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��}u�>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�|s�>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�{so>Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983 � ��!�1 � ��u�?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�s�?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�so?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�s�W?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�s�?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�sm?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286 a e�@� a �$� s�W@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B� s�@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n� sm@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286� � s�)@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992�� s�/@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056��u�;?Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500 < ���a � < � �s�)ARichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.4Td�@- Fix: hivex missing checks for small/truncated files resolves: rhbz#1158992��s�/ARichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.3T"�@- Fix: hivexml generates "Argument list too long" error. resolves: rhbz#1145056��u� @Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a�@- Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193��u�;@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500��u�@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�s�@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�so@Richard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983 � ��!�1 � ��u�ARichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.10^��@- Increase limits on number of subkeys etc. resolves: rhbz#1822889{�s�ARichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.9Yܶ@- Enable OCaml subpackage on s390x. resolves: rhbz#1447983o�soARichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.8Y�@- Rebuild for OCaml 4.05 resolves: rhbz#1447983�$�s�WARichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8X��- Tolerate corruption in some hives resolves: rhbz#1423436 - Switch to using git to manage patches.�B�s�ARichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7Ti�A- Fix: "Argument list too long" when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz#1145056n�smARichard W.M. Jones <rjones@redhat.com> - 1.3.10-5.6Ti�@- Fix: typo in man page resolves: rhbz#1099286 } e��*� } ��!�#�BFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildm� gwBTomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l�- Switched from SysV to systemd - Spec rearrangements�� �!�BFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildb� uSBAlexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~�- Switch to servlet 3.0 by default.G� g+BTomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX�@- Fixed symlink�� u� ARichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.12a�@- Limit recursion in ri-records (CVE-2021-3622) resolves: rhbz#1976193��u�;ARichard W.M. Jones <rjones@redhat.com> - 1.3.10-6.11`y|@- Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950500 � s���I � � b�(uSCAlexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~�- Switch to servlet 3.0 by default.G�'g+CTomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX�@- Fixed symlink��&w�'BMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch�@- Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853�8�%w�{BMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ�- Remove dependency on initscripts - Add After=network.target to systemd service - Resolves: rhbz#1283893, rhbz#1269717Q�$g?BDaniel Mach <dmach@redhat.com> - 1:1.8.1.3-13R�k�- Mass rebuild 2013-12-27��#w�BMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571� �"w� BMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q��- Fix incorrect permissions on systemd unit file - Resolves: rhbz#963911 . b�S�> � . �8�/w�{CMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ�- Remove dependency on initscripts - Add After=network.target to systemd service - Resolves: rhbz#1283893, rhbz#1269717Q�.g?CDaniel Mach <dmach@redhat.com> - 1:1.8.1.3-13R�k�- Mass rebuild 2013-12-27��-w�CMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571� �,w� CMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q��- Fix incorrect permissions on systemd unit file - Resolves: rhbz#963911��+�#�CFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildm�*gwCTomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l�- Switched from SysV to systemd - Spec rearrangements��)�!�CFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � n$�!� � � �6w� DMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q��- Fix incorrect permissions on systemd unit file - Resolves: rhbz#963911��5�#�DFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuildm�4gwDTomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l�- Switched from SysV to systemd - Spec rearrangements��3�!�DFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildb�2uSDAlexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~�- Switch to servlet 3.0 by default.G�1g+DTomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX�@- Fixed symlink��0w�'CMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch�@- Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853 x$h��' � m�>gwETomas Radej <tradej@redhat.com> - 1:1.8.1.3-9P7l�- Switched from SysV to systemd - Spec rearrangements��=�!�EFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-8P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildb�<uSEAlexander Kurtakov <akurtako@redhat.com> 1:1.8.1.3-7O~�- Switch to servlet 3.0 by default.G�;g+ETomas Radej <tradej@redhat.com> - 1:1.8.1.3-6OX�@- Fixed symlink��:w�'DMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch�@- Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853�8�9w�{DMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ�- Remove dependency on initscripts - Add After=network.target to systemd service - Resolves: rhbz#1283893, rhbz#1269717Q�8g?DDaniel Mach <dmach@redhat.com> - 1:1.8.1.3-13R�k�- Mass rebuild 2013-12-27��7w�DMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571 e �r+��V��: � � e D�Q � 57e3a74cb68c72426ee6a022b286950bbc4ac0c0a450be5d5e07d0a0ac91fcc0D�P � 6598e08634815038cb179701fefe7d97564cc4df49d4858c66ac323e5c9c5628D�O � 1562216c2581239f50ab2fbbcd1a38b49ace932313a42d97acd2fa2767606ffdD�N � 18b6542a7872436ef0c7efd318aadaca8d2c6de3a49d4cd5fd54986bf4b9109eD�M � 1243b5c5c37f8cff61bef905abb14b3fec79b4baf0f8804006af238bbc09108fD�L � 760d5445bc23c3428607195fc5e872474f29cb02a1ec8cc53a0bc41b6771e204D�K � 4d58a246d4453df6a19b52d675c58ebe8d648d62ede5f2fc0cbcb709d686a098D�J � 07cfec6beda5578439d467fa4a51b7e846ea94e1eb455753928367e7fd96ac68D�I � 35fc790f76f1d12e738a6b5cd1438085704844f9c267638a15f9cc080376b10dD�H � 9a93379d2c2af5db3ccd19b3b12e93f6dee917f2156fc18048525a7a90b313caD�G � c425b045fd266e2130faf0b97fe7cadc5218ad8cbb8e87ffbafe1d35b166ff43D�F � e083624285f3f8668aeebe5e4297e96c9e4ea9ed3cece7a3318166272f0fe11aD�E � 4cf62f2fe312ff9b70310eeb760aecc8141285cba4ffec167b47f1cd26cb8fec 6 a�L�< � 6 q�E]�FJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218)��Dw�'EMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-15ch�@- Fix possible remote code execution vulnerability - Resolves: CVE-2022-41853�8�Cw�{EMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14VZ�- Remove dependency on initscripts - Add After=network.target to systemd service - Resolves: rhbz#1283893, rhbz#1269717Q�Bg?EDaniel Mach <dmach@redhat.com> - 1:1.8.1.3-13R�k�- Mass rebuild 2013-12-27��Aw�EMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-12Q�z�- Rebuild to regenerate API documentation - Resolves: CVE-2013-1571� �@w� EMikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-11Q��- Fix incorrect permissions on systemd unit file - Resolves: rhbz#963911��?�#�EFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:1.8.1.3-10Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild � ��Gk�9FLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�Fk�?FLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�Jk�%FLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��Ik�IFLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�H]mFJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � �P�N}�%FCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah�- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�.�Mq�mFLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Lk�=FLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��Kk�9FLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� "� #� $� %�( &�0 '�8 )�@ *�H +�P ,�Y -�a .�i /�p 0�x 1� 2� 3� 4� 5� 6�) 7�1 8�8 :�> ;�E <�M =�S >�Z ?�` @�f A�m B�s C�z D� E� F� G� H� I�! J�( K�/ L�6 M�> O�E P�G Q�J R�N T�P U�S V�W W�Z X�\ Y�` Z�c [�e \�i ]�m ^�o _�r `�t a�v b�x c�| d� e� f� g� h� i� j� k� l� m� n�# o�' p�* q�, r�0 s�3 t�5 u�9 v�= x�? y�B z�D {�F |�H }�L ~�P �U ��Z ��_ ��d ��f ��i ��k ��n ��p ��s ��w ��z ��| �� �� �� �� �� �� �� �� �� �� � ��Pk�9GLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�Ok�?GLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�Sk�%GLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��Rk�IGLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�Q]mGJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � ��Wq�/GLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Vq�mGLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Uk�=GLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��Tk�9GLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ) ,�) ��Zk�IHLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�Y]mHJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)�P�X}�%GCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases � 5 � ��\k�9HLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�[k�%HLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�`q�kHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��_q�/HLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�^q�mHLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�]k�=HLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues E ��E ��ck�IILubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time�P�b}�%HCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4a�Z@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�F�aW�7HLuboš Uhliarik <luhliari@redhat.com>a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � 5 � ��ek�9ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�dk�%ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�iq�kILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��hq�/ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�gq�mILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�fk�=ILubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� � ��mm�7JLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1�P�l}�%ICentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�:�kq�ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�jq�7ILuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�ok�?JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�n]�JJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��rk�IJLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�q]mJJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��pk�9JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��tk�9JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�sk�%JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � �� �N�vy�%JCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_���- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�S�uk�=JLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � 5 � ��xk�9KLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�wk�%KLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�|q�kKLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��{q�/KLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�zq�mKLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�yk�=KLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues j ��> j �P� }�%KCentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�)�q�cKLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�~q�KLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�}q�7KLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�q�kLLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/LLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�q�mLLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�k�=LLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��k�9LLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value O ��> � O F� OALJohnny Hughes <johnny@centos.org>d-b�- Manual CentOS Debranding�"� q�ULLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�q�cLLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�q�LLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�q�7LLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�q�kMLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/MLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.� q�mMLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S� k�=MLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues�� k�9MLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ��> � �q�MLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�q�UMLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�q�cMLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�q�MLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�q�7MLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�k�?NLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�]�NJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��k�INLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�]mNJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��k�9NLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��k�9NLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�k�%NLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications # ��# �P� }�%NCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah�- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�.� q�mNLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S� k�=NLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� k�9OLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T� k�?OLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�#k�%OLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��"k�IOLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�!]mOJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � ��'q�/OLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�&q�mOLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�%k�=OLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��$k�9OLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ) ,�) ��*k�IPLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�)]mPJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)�P�(}�%OCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases � 5 � ��,k�9PLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�+k�%PLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�0q�kPLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��/q�/PLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�.q�mPLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�-k�=PLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues E ��E ��3k�IQLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time�P�2}�%PCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4a�Z@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�F�1W�7PLuboš Uhliarik <luhliari@redhat.com>a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � 5 � ��5k�9QLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�4k�%QLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�9q�kQLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��8q�/QLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�7q�mQLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�6k�=QLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� � ��=m�7RLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1�P�<}�%QCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�:�;q�QLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�:q�7QLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session e �r+��V��: � � e D�^ � 2efed6a1834b9396c783a23359a0750766c22f944cdc5953485f45050af967feD�] � 27c88f137de5866849397dd80af6fd026191916624a901d7d157db89d720351bD�\ � 1900d58b22825187824aca7c1c6d194d7a401d5fcf0c433dc2037ac97141b1fdD�[ � 4112f1f23e8f476ae869ef1e7ba7b1dcd072616c0fcd173ce6f6a784d7d9f05fD�Z � 5ca852164720791fe6e270a360e14b479b57e0fa1f71c93c1e582a9179353c61D�Y � a52b0985bc9791dee53f7a73f22051cc229824892249b53b748eaad81619a0bfD�X � fd5c2fb9ea8fe33dda81b2c13693c8901313964b621a4845172a14c12df1439aD�W � 1032b8922d675f553db7b6424ba04c52bf5594bf148d3c80cf447060379be540D�V � fbb00aafe5d8bd8b4ce85814f2d529e893f31e915c6393c651859d9dd4be56abD�U � 3d4ce04e90a019a713860f38b262e7e948563f62770c6d7fa6bafd59e0ad0580D�T � 82d5ee0b6f067209f21584e5acc7fc2bea3ab64f1d41f52bbe4bddc612f4670dD�S � f359b38fcffcd9d7ae7daab258f4fd7abea1c839790269254b9b1fbebcb55ba1D�R � 80b89881a4e050f35e7e02a7da9f7eeb5a152b057a835557cd8472b6f91d182a 4 �4 �T�?k�?RLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�>]�RJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��Bk�IRLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�A]mRJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��@k�9RLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��Dk�9RLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Ck�%RLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � �� �N�Fy�%RCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_���- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�S�Ek�=RLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � 5 � ��Hk�9SLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Gk�%SLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�Lq�kSLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Kq�/SLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Jq�mSLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Ik�=SLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues j ��> j �P�P}�%SCentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�)�Oq�cSLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�Nq�SLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�Mq�7SLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�Uq�kTLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Tq�/TLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Sq�mTLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Rk�=TLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��Qk�9TLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value O ��> � O F�ZOATJohnny Hughes <johnny@centos.org>d-b�- Manual CentOS Debranding�"�Yq�UTLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�Xq�cTLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�Wq�TLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�Vq�7TLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�_q�kULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��^q�/ULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�]q�mULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�\k�=ULubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��[k�9ULubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ��> � �dq�ULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�cq�UULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�bq�cULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�aq�ULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�`q�7ULuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�fk�?VLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�e]�VJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��ik�IVLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�h]mVJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��gk�9VLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��kk�9VLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�jk�%VLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications # ��# �P�n}�%VCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah�- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�.�mq�mVLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�lk�=VLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � ��pk�9WLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�ok�?WLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�sk�%WLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��rk�IWLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�q]mWJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � ��wq�/WLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�vq�mWLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�uk�=WLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��tk�9WLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ) ,�) ��zk�IXLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�y]mXJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)�P�x}�%WCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases � 5 � ��|k�9XLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�{k�%XLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-� q�kXLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/XLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�~q�mXLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�}k�=XLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues E ��E ��k�IYLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time�P�}�%XCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4a�Z@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�F�W�7XLuboš Uhliarik <luhliari@redhat.com>a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � 5 � ��k�9YLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�k�%YLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-� q�kYLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/YLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�q�mYLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�k�=YLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� � �� m�7ZLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1�P� }�%YCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�:� q�YLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S� q�7YLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�k�?ZLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�]�ZJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��k�IZLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�]mZJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��k�9ZLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��k�9ZLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�k�%ZLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � �� �N�y�%ZCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_���- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�S�k�=ZLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � 5 � ��k�9[Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�k�%[Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-� q�k[Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��q�/[Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�q�m[Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�k�=[Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues j ��> j �P� }�%[CentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�)� q�c[Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:� q�[Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S� q�7[Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�%q�k\Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��$q�/\Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�#q�m\Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�"k�=\Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��!k�9\Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value O ��> � O F�*OA\Johnny Hughes <johnny@centos.org>d-b�- Manual CentOS Debranding�"�)q�U\Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�(q�c\Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�'q�\Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�&q�7\Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�/q�k]Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��.q�/]Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�-q�m]Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�,k�=]Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��+k�9]Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ��> � �4q�]Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�3q�U]Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�2q�c]Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�1q�]Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�0q�7]Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�6k�?^Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�5]�^Joe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��9k�I^Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�8]m^Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��7k�9^Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��;k�9^Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�:k�%^Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications # ��# �P�>}�%^CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.1ah�- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�.�=q�m^Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�<k�=^Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues e �r+��V��: � � e D�k � 93736c157e6c574d78df16b0ccdcb3d5d5bc0856fb66a7d43da85bfe6d0149a6D�j � 0261a6827bcb70a4d4e0bbabff124f88c79ad1171f8d19e379a2e019e4867abfD�i � 5fbeceddf0bf8f98be4ae1abfe85a15497949baa0f03eb2097d8bd245122c6caD�h � d70d1392ce3021f70e51c4dc35c2fa251da70e2e0b7384fc3ca8003c9c2f59bfD�g � b021fb63d01712466969d8b248713efeb2085fedebff3f3d2e0f0500cd70ea47D�f � 6c3c6e8e517dcf759d5a75600d88260d972e071d18adcef801da195de54076b6D�e � a07b8c2dfe81595e9e9b35a3f4a4c913496728d0ab4422f3a5e00e2c9d5174adD�d � 4317de17f229764365281623322d3bfc068eeae3772e61937438e1e190c1251eD�c � 80b0aaff62516f728ee4d1972185e7b7b5f5d15ea67da82dd19429fac70a5b23D�b � 0094b5e088ab7669b50681c5ee1c139c5ea4b295dff26681ef9aabc6f5a119dbD�a � 601f376aa7ef59f60e13ba11f0a9a7286b883a945173b5b829fe2e939b6b3d1eD�` � 8fefb0595d7ec2b0969e86042785c698809542ecd2b793434519146c6285a65eD�_ � ab57b19bedc00d6be037859d8d8126fff6c0f4421a2b085376f188106987b7e2 � ��@k�9_Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection�T�?k�?_Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency 2 �� 2 �G�Ck�%_Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications��Bk�I_Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�A]m_Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889) � kb � ��Gq�/_Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Fq�m_Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Ek�=_Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��Dk�9_Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ) ,�) ��Jk�I`Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�I]m`Joe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)�P�H}�%_CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.2a��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases � 5 � ��Lk�9`Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Kk�%`Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�Pq�k`Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Oq�/`Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Nq�m`Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Mk�=`Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues E ��E ��Sk�IaLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time�P�R}�%`CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4a�Z@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�F�QW�7`Luboš Uhliarik <luhliari@redhat.com>a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session � 5 � ��Uk�9aLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�Tk�%aLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�Yq�kaLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��Xq�/aLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�Wq�maLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�Vk�=aLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � �� � ��]m�7bLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-88[+�@- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1�P�\}�%aCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.5b<]@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�:�[q�aLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�Zq�7aLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session 4 �4 �T�_k�?bLubos Uhliarik <luhliari@redhat.com> - 2.4.6-90\��@- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistencyq�^]�bJoe Orton <jorton@redhat.com> - 2.4.6-89\���- fix per-request leak of bucket brigade structure (#1583218) h k h ��bk�IbLubos Uhliarik <luhliari@redhat.com> - 2.4.6-93]�z@- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry timec�a]mbJoe Orton <jorton@redhat.com> - 2.4.6-92]^��- htpasswd: add SHA-2 crypt() support (#1486889)��`k�9bLubos Uhliarik <luhliari@redhat.com> - 2.4.6-91]A��- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection � 5 � ��dk�9bLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�ck�%bLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � �� �N�fy�%bCentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos_���- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�S�ek�=bLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues � 5 � ��hk�9cLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value�G�gk�%cLubos Uhliarik <luhliari@redhat.com> - 2.4.6-94^|�@- Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications � ��d � �-�lq�kcLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��kq�/cLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�jq�mcLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�ik�=cLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues j ��> j �P�p}�%cCentOS Sources <bugs@centos.org> - 2.4.6-98.el7.centos.6c��@- Remove index.html, add centos-noindex.tar.gz - change vstring - change symlink for poweredby.png - update welcome.conf with proper aliases�)�oq�ccLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�nq�cLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�mq�7cLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�uq�kdLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��tq�/dLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�sq�mdLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�rk�=dLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��qk�9dLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value O ��> � O F�zOAdJohnny Hughes <johnny@centos.org>d-b�- Manual CentOS Debranding�"�yq�UdLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�xq�cdLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�wq�dLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S�vq�7dLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session kb � �-�q�keLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3a� �- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content��~q�/eLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.2av�@- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix�.�}q�meLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1a^�@- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"�S�|k�=eLubos Uhliarik <luhliari@redhat.com> - 2.4.6-97_}��- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues��{k�9eLubos Uhliarik <luhliari@redhat.com> - 2.4.6-95^��@- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value ��> � �q�eLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-99.1dJc�- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690�"�q�UeLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7d�@- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy�)�q�ceLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6c��@- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses�:�q�eLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5b9�@- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier�S� q�7eLuboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.4a� �- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session N D�:� � N � � [�;fHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V� Y�UfJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� �Y�)fJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x�Y�fJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� �Y�?fJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8�Y�fJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274 Y � {�U � Y ��k� gTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�k{gTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �k�+gTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module��[�OfHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699�� [�CfHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� � [�;fHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b� [mfHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412 � y�� � � _�c_gRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��m�gTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �m�gTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�k� gTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��k�gTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�kygTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��k� gTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death z r�v�| � z z� k� hTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()�� k�hTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp� kyhTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po�� k� hTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��k� hTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�k{hTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �k�+hTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module � |��� � ��&k� iTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��%k� iTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�$k{iTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �#k�+iTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�"c_hRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��!m�hTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� � m�hTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression ��� � q�.k{jTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �-k�+jTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�,c_iRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��+m�iTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �*m�iTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�)k� iTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��(k�iTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�'kyiTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po r x�~�| � r ��5m�jTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �4m�jTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�3k� jTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��2k�jTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�1kyjTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��0k� jTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��/k� jTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar ��� � z�=k� kTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��<k�kTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�;kykTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��:k� kTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��9k� kTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�8k{kTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �7k�+kTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�6c_jRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks � |��� � ��Dk� lTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Ck� lTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�Bk{lTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �Ak�+lTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�@c_kRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��?m�kTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �>m�kTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression e �r+��V��: � � e D�x � ff13cc6851b7555532b91dc5f8a9c7b73fb8f47f0f39be06ad101f6250c679c5D�w � e9ccc19a3fa831005a0f5568fdabe7c13acd32de915df5fe49983a0214fb34d3D�v � d4c752f14b919fcec87f8f21c7401dc7c9b2ceb39af9d43b03be700c06316653D�u � 32a6e9291813e4daadd971db10a8925ff8233160eb5a5a4fb45d5590f18f2893D�t � 78d39bca758e7f5e4b5122c075cbb2a2c1d8ab9c258b4f91f4744f9ff29a5e8dD�s � 66fc4721d3b2689eac33494f18ab2cf85d9ee8d1dd8532c964f11eeff008e9f1D�r � a22140d2598b1d94d1cef9f4d960ba6d9726634bd9bec4682f6338583e5bedbeD�q � c3b0298c3bbfa69481b4841885e4c53580433e8d4610ea22939be12d797bd88aD�p � 7690f944ed218f74b3624308e1a4d4ddbbef310d2d09257774fdfdadf5cd3916D�o � 476abb9c019d06d8fbb8b7d20433405022b208c2c777b1de0c036fff3108fc7eD�n � b1f22640d57b95b5f307687ba9cae4a938f5332030e06b6e6ade62170f059a4fD�m � 1b1b3c99c21402de3620ed1fecbd44518682eccd70866a5c3c361b33f649f188D�l � e58be69903032ce19789e8066ac18b837e6cf4b67db9460c5dbac4897f678352 ��� � q�Lk{mTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �Kk�+mTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�Jc_lRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��Im�lTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �Hm�lTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�Gk� lTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��Fk�lTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�EkylTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po r x�~�| � r ��Sm�mTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �Rm�mTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�Qk� mTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��Pk�mTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�OkymTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��Nk� mTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Mk� mTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar ��� � z�[k� nTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��Zk�nTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�YkynTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��Xk� nTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��Wk� nTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�Vk{nTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �Uk�+nTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�Tc_mRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks � |��� � ��bk� oTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��ak� oTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�`k{oTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �_k�+oTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�^c_nRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��]m�nTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �\m�nTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression ��� � q�jk{pTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �ik�+pTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�hc_oRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��gm�oTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �fm�oTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�ek� oTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��dk�oTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�ckyoTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po r x�~�| � r ��qm�pTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �pm�pTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�ok� pTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��nk�pTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�mkypTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��lk� pTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��kk� pTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar ��� � z�yk� qTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��xk�qTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�wkyqTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po��vk� qTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��uk� qTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�tk{qTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �sk�+qTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�rc_pRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks of #flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �� ��% ��* ��/ ��4 ��6 ��9 ��; ��> ��@ ��C ��G ��J ��L ��P ��S ��U ��Y ��] ��_ ��b ��d ��f ��h ��l ��p ��u ��z �� �� �� �� �� �� ��& ��. ��5 ��= ��D ��L ��S ��[ ��b ��j ��q ��y �� �� �� �� �� �� ��$ ��( ��. ��3 ��8 ��9 ��< ��> ��A ��D ��G ��J ��N ��P ��S ��V ��Y ��\ ��^ ��` ��c ��d ��e ��f ��i ��l ��m ��n ��o ��r ��u �v �w �x �{ �~ � � � � � � � � � � � � � � � �! �$ �( �* �- �0 !�3 "�6 � |��� � �� k� rTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death��k� rTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL barq�~k{rTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �}k�+rTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�|c_qRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��{m�qTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �zm�qTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression ��� � q�k{sTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-4\�O�- Resolves: #1693926 - Commit hangul preedit with mouse� �k�+sTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-3\��@- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module_�c_rRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks��m�rTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �m�rTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz�k� rTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()��k�rTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp�kyrTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po r x�~�| � r ��m�sTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-11^�H�- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows� �m�sTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-10^ �@- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regressionz� k� sTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-9]�4@- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()�� k�sTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-8]��@- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allowsp� kysTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-7]M`@- Resolves: #1686913 - Fix rpmdiff inspection in ko.po�� k� sTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-6]Ik�- Resolves: #1686913 - ibus-daemon always will exits with parent's death�� k� sTakao Fujiwara <tfujiwar@redhat.com> - 1.5.17-5\�s@- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar �/j �g�U�{tJiri Vanek <jvanek@redhat.com> 1.7-1Y�B@- updated to itw 1.7 and sync from fedora - added forgotten slaves of itweb-settings policyeditor - Own %{_datadir}/%{name} dir - Mark non-English man pages with %lang - Install COPYING as %license - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270 - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir - removed maven macros in favour of manual handling (bug) - Resolves: rhbz#1475411b�YotJiri Vanek <jvanek@redhat.com> 1.6.2-4W�~�- fixed typo in provides - Resolves: rhbz#1299537�A�Y�+tJiri Vanek <jvanek@redhat.com> 1.6.2-3W�-@- added --family to make it part of javas alternatives alignment - java-javaver-openjdk collected into preffered_java - Resolves: rhbz#1299537�N�Y�EtJiri Vanek <jvanek@redhat.com> 1.6.2-1V��- updated to 1.6.2 - fixed also rhbz#1303437 - packag �_�c_sRay Strode <rstrode@redhat.com> - 1.5.17-12_��@- Resolves: #1882009 - Fix GVariant leaks e owns /etc/bash_completion.d but it should not own it - generated maven metadata (isntalled but not used. set -e _pompart="need" _jarpart="tobe" _filelist=".mfiles" install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then _jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" fi done python -m /usr/share/java-utils/maven_depmap \ -p "/usr" -n "" \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \ >> ${_filelist} sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} sort -u -o ${_filelist} ${_filelist} - Resolves: rhbz#1299537 l ��� l ��Y�StJiri Vanek <jvanek@redhat.com> 1.7.1-4_���- Added Patch6, altjava.patch to make usage of alt-java prefferd over java - Resolves: rhbz#1901639��Y�KtJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment - Resolves: rhbz#1724958� �Y�CtJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 - Resolves: rhbz#1724958 - Resolves: rhbz#1725928 - Resolves: rhbz#1724989Y�Y]tJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7��* bump to 1.7.1 - Resolves: rhbz#1475411��U�/tJiri Vanek <jvanek@redhat.com> 1.7-3Y�Z@- javaws specific manpage renmed from -suffix to .suffix - Resolves: rhbz#1475411q�U�tJiri Vanek <jvanek@redhat.com> 1.7-2Y�BA- gathered various patches from usptream - Resolves: rhbz#1475411 e owns /etc/bash_completion.d but it should not own it - generated maven metadata (isntalled but not used. set -e _pompart="need" _jarpart="tobe" _filelist=".mfiles" install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then _jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" fi done python -m /usr/share/java-utils/maven_depmap \ -p "/usr" -n "" \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \ >> ${_filelist} sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} sort -u -o ${_filelist} ${_filelist} - Resolves: rhbz#1299537 | ��g | �g� U�{uJiri Vanek <jvanek@redhat.com> 1.7-1Y�B@- updated to itw 1.7 and sync from fedora - added forgotten slaves of itweb-settings policyeditor - Own %{_datadir}/%{name} dir - Mark non-English man pages with %lang - Install COPYING as %license - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270 - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir - removed maven macros in favour of manual handling (bug) - Resolves: rhbz#1475411b� YouJiri Vanek <jvanek@redhat.com> 1.6.2-4W�~�- fixed typo in provides - Resolves: rhbz#1299537�A� Y�+uJiri Vanek <jvanek@redhat.com> 1.6.2-3W�-@- added --family to make it part of javas alternatives alignment - java-javaver-openjdk collected into preffered_java - Resolves: rhbz#1299537�N�Y�EuJiri Vanek <jvanek@redhat.com> 1.6.2-1V��- updated to 1.6.2 - fixed also rhbz#1303437 - packag � l ��� l ��$Y�SuJiri Vanek <jvanek@redhat.com> 1.7.1-4_���- Added Patch6, altjava.patch to make usage of alt-java prefferd over java - Resolves: rhbz#1901639��#Y�KuJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment - Resolves: rhbz#1724958� �"Y�CuJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 - Resolves: rhbz#1724958 - Resolves: rhbz#1725928 - Resolves: rhbz#1724989Y�!Y]uJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7��* bump to 1.7.1 - Resolves: rhbz#1475411�� U�/uJiri Vanek <jvanek@redhat.com> 1.7-3Y�Z@- javaws specific manpage renmed from -suffix to .suffix - Resolves: rhbz#1475411q� U�uJiri Vanek <jvanek@redhat.com> 1.7-2Y�BA- gathered various patches from usptream - Resolves: rhbz#1475411 e owns /etc/bash_completion.d but it should not own it - generated maven metadata (isntalled but not used. set -e _pompart="need" _jarpart="tobe" _filelist=".mfiles" install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then _jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" fi done python -m /usr/share/java-utils/maven_depmap \ -p "/usr" -n "" \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \ /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \ >> ${_filelist} sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} sort -u -o ${_filelist} ${_filelist} - Resolves: rhbz#1299537 | ��g | �g�(U�{vJiri Vanek <jvanek@redhat.com> 1.7-1Y�B@- updated to itw 1.7 and sync from fedora - added forgotten slaves of itweb-settings policyeditor - Own %{_datadir}/%{name} dir - Mark non-English man pages with %lang - Install COPYING as %license - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270 - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir - removed maven macros in favour of manual handling (bug) - Resolves: rhbz#1475411b�'YovJiri Vanek <jvanek@redhat.com> 1.6.2-4W�~�- fixed typo in provides - Resolves: rhbz#1299537�A�&Y�+vJiri Vanek <jvanek@redhat.com> 1.6.2-3W�-@- added --family to make it part of javas alternatives alignment - java-javaver-openjdk collected into preffered_java - Resolves: rhbz#1299537�N�%Y�EvJiri Vanek <jvanek@redhat.com> 1.6.2-1V��- updated to 1.6.2 - fixed also rhbz#1303437 - packag � l ��� l ��.Y�SvJiri Vanek <jvanek@redhat.com> 1.7.1-4_���- Added Patch6, altjava.patch to make usage of alt-java prefferd over java - Resolves: rhbz#1901639��-Y�KvJiri Vanek <jvanek@redhat.com> 1.7.1-3]0_A- Added Patch5, testTuning.patch to make tests pass inclean envirnment - Resolves: rhbz#1724958� �,Y�CvJiri Vanek <jvanek@redhat.com> 1.7.1-2]0_@- added patch1, patch4 and patch11 to fix CVE-2019-10182 - added patch2 to fix CVE-2019-10181 - added patch3 and patch33 to fix CVE-2019-10185 - Resolves: rhbz#1724958 - Resolves: rhbz#1725928 - Resolves: rhbz#1724989Y�+Y]vJiri Vanek <jvanek@redhat.com> 1.7.1-1Z7��* bump to 1.7.1 - Resolves: rhbz#1475411��*U�/vJiri Vanek <jvanek@redhat.com> 1.7-3Y�Z@- javaws specific manpage renmed from -suffix to .suffix - Resolves: rhbz#1475411q�)U�vJiri Vanek <jvanek@redhat.com> 1.7-2Y�BA- gathered various patches from usptream - Resolves: rhbz#1475411 � �s- � � �3a�]wJan Macku <jamacku@redhat.com> - 9.49.49-1]Z�@- ifup-eth: Check that device name is set (bug #1741830) - Add option for IPv6 GRE tunnel (bug #1691552)�a�2a�cwJan Macku <jamacku@redhat.com> - 9.49.48-1]Ik�- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977) - Configure autorelabel service to output to journal and to console if set (bug #1634661) - Fix changelog typo^�1a_wJan Macku <jamacku@redhat.com> - 9.49.47-1\��- Fix file permissions for /var/log/dmesg��0{�wDavid Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.46-1[�@- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)��/{�wDavid Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.49.45-1[W�- network: parsing of /proc/mounts returned (bug #1572659) - netconsole: LSB header added (bug #1508489) - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384) � ky� n�8qowJan Macku <jamacku@redhat.com> - 9.49.53-1.el7_9.1_���- rwtab: Allow updating mlocate.db (bug #1880095)c�7aiwJan Macku <jamacku@redhat.com> - 9.49.53-1^Ǿ�- rwtab: Add support for chrony (bug #1838260)��6a�CwJan Macku <jamacku@redhat.con> - 9.49.52-1^�x�- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)Z�5aWwJan Macku <jamacku@redhat.com> - 9.49.51-1^r @- Fix inline comment - (bug #1773798)��4a�CwJan Macku <jamacku@redhat.com> - 9.49.50-1^h�- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798) } } ��9}�xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �<��;xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o }�;}�xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�:}�qxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�>�uxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�=��UxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�A��kxFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�@��3xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��?��xFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�D}�yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�C}�qyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�B}?xCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding e �r+��V��: � � e D� � 5eee4ed6f4cdcbe1b9de452b76bc924f965eab492a06b0b7f5bb0bbb156d824fD� � 0c844b3fd55943ad6df491c0f9396667119e7d8f737d079ca70e1e354c04d769D� � 7dfa4db17abc05d6bf097a9695e02d8f0889d219fe48c90d147cef40ee6a34e0D� � 833dc73a5ec23e1c5d73db93091846da2a990c4c750e903a4a09f3a61282dab0D� � 779491f4aff62cb66747a794b7b823e9645eed730e157ff87a8425bfd96871c9D� � 509cf9ac14798ddb50f8710817ee91492ef1e1b1a27d3921e30b5434858dc294D� � 8b49fbdabac5e8dd32d8de8826af7fee4b0eeab0828f5ad71004efba08ce1b40D�~ � 74fb87c43d42d2e134909edffc5d2d759fa9ac176e342697b6d590d62ca8a11fD�} � 2310b0e53fdf17749832f558cf06510e127435a1cce7658a84665de1bf9fa2e7D�| � 08dfe3130e723092bcc8145c8b90e71cc35804a68abc5879143350368fece38bD�{ � a01dae3f1eb932f0bc862e5f5466508b803a3d1c7bbc6b989e42cef1534de0e3D�z � 488103f93db3517ddb11caa529814abccd07f454858bec9681eec8375c544207D�y � f24fba7955a7d873bfbd39bae28a5c850f2c27928e1cd98d54264fe51a7d4bef ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�G�uyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�F��UyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �E��;yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�J��kyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�I��3yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��H��yFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �N��;zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�M}�zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�L}?yCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�K��kyFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�P�uzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�O��UzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�S��kzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�R��3zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��Q��zFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�V}?zCentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�U��qzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�T��kzFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�Y�u{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�X��U{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �W��;{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�\��k{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�[��3{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��Z��{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�^��q{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�]��k{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�`��;{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�_��%{Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file X � � X ��c�|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �P�b�#|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�a�E|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�d}�c|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�e}�G|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��f}�|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �i��;|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�h}�|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�g}�q|Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��l�}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �P�k�#}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�j{?|CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�m}�c}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�n}�G}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��o}�}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �r��;}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�q}�}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�p}�q}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��u�~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �[�t{?}CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�s��U}Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�v}�c~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�w}�G~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��x}�~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �{��;~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�z}�~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�y}�q~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�~{?~CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�}�u~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�|��U~Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�}�cFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!� }�GFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�}�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�qFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��uFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���UFlorence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!� }�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�{?CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } �� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v� }�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v� }�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\� }?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�!�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o l� �y�$��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�#��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��"���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �(��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�'}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�&}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�%��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�*�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�)��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�-��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�,��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��+���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�0}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�/��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�.��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�3�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�2��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �1��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o l� �y�6��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�5��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��4���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�8��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�7��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�:��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�9��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file X � � X ��=��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa &�P�<�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�;�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag '-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss (d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�>}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�?}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��@}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �C��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o -�}�B}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�A}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��F��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa 0�P�E�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�D{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding e �r+��V��: � � e D� � ceba479b3f7e61b1f98d50e4797543b538d563b420b419155fedeead08a06b2eD� � d2db9132b158642ca3acdce95a3018565ff05f4497c6fa76140e7a98a3a959f3D� � 3bc9984dc4e0e90245e74d760cf04b6707669b3289dc3e70c040cdfde4d44319D� � 96d4abfe67bd7a9d955276cf0a4e0987e05c018e86c09903e0f0417e753e77acD� � 8087b4408319998ae1d6b166c84ecab64a54cea6ca23c0fa10d0108446ac99c1D� � a7f79e36bdad845ee95ab0dcf81c2ac21d35da133b48c0cb448fbd6f1f3a5ceaD� � acedb410f50fe7ddd7938fec4bc88806e9f316f2c58569efa76c504f5ef11916D� � 4206286662c3bca7d5dec45b6571835c5c580374921fcc382635bbf1caddac77D� � 9a646552f12a087de4493fe8a4dfec0a5fb87521f568758c6136443c9644c22fD� � 8089409b82d6904e6a2853e0d520b54e8935468e99ddd4cec8394dcee0e731d7D� � bbc75e7ebe20ce9f9b3a0c5ed5ebce0ec757c6a71b928408b3219bb857294882D� � f07e21fd43e16c0797d167891e1f8dd87c7bcf4ac4177307aec21e25a55ece03D� � ef279f239f0fe62929c62165d00a4076c51667ba82c640a3790df88dfa67ffa1 1-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss 2d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�G}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�H}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��I}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �L��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o 7�}�K}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�J}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��O��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa 9[�N{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�M��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. :-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss ;d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�P}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�Q}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��R}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �U��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o @�}�T}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�S}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�X{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�W�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�V��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�Y}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�Z}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��[}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �^��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o F�}�]}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�\}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�`�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�_��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�c}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�b{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��a���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��d}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �g��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o K�}�f}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�e}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�i�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�h��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�l{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\�k��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��j���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��m}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �p��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o P�}�o}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�n}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�r�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�q��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�u��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�t��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��s���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�x}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�w}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�v}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�{�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�z��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �y��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o T l� �y�~��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�}��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��|���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o X�}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\� }?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \� }?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|� ��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |� �u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o \ l� �y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|���q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V���%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file X � � X ����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa b�P��#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a��E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag c-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss dd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� $�: %�= )�> *�? +�@ ,�C .�F 3�G 4�H 5�I 6�L 8�O <�P =�Q >�R ?�U A�X B�Y C�Z D�[ E�^ G�` H�c I�d J�g L�i M�l N�m O�p Q�r R�u S�x U�{ V�~ W� Y� Z� [� ]� ^� _� `� a� e� f� g� i� k� o�! p�" q�# r�& t�) x�* y�+ z�, {�/ }�2 ~�3 �4 ��5 ��8 ��: ��= ��> ��A ��C ��F ��G ��J ��L ��O ��R ��U ��X ��\ ��^ ��a ��d ��g ��j ��l ��n ��q ��r ��s ��t ��w ��z ��{ ��| ��} �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� ��! ��$ Y �� Y � � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o j�}� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ �� ��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa l�P� �#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[� {?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding m-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss nd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�!}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�"}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��#}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �&��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o s�}�%}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�$}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��)��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa u[�({?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�'��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. v-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss wd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�*}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�+}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��,}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �/��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o |�}�.}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�-}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�2{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�1�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�0��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�3}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�4}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��5}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �8��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�7}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�6}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�:�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�9��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�=}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�<{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��;���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��>}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �A��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�@}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�?}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�C�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�B��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�F{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\�E��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��D���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server e �r+��V��: � � e D� � cd7ab4d402e24250450215dd316bc8db5cbabc2abdaf16110521f6e623589deaD� � 95ca57f8286ce2eaacee848405bb95f1e3ae571def5526f34c8d1abdb873b30cD� � c3063c4a546358bcf8640da753ea13f90ccbb18da78588f7c8a9b3011eccfd55D� � ac419246df9921713ed1c65bf7621fa6b5266999545f33a73aab328bcd38d3f0D� � 7bfce38ec77185d1696e388cecf4163509c7884933ded369897a1fcf77610b49D� � da1dc98d83517de259389f28cb15535a0c5b895342f95881d9cdb88529401e7aD� � 951d300e30de3f44fa83fea5bff378fb53589245060530b325e00fa9f6c7f5d3D� � 13e6e0aca27ac928a13a8392353c51dcc310d1458f84cf2c8811620996c73fc2D� � 065be8dcad1accb013d907c343f946bf2aee0c7ebe74cc8d43c80d008e10fed5D� � 9277a339164ce4554d7e44a5274d72e8acdef0f65c7e2f5ae1558953312edbfcD� � f3480d9490430ccdec35a8db1fdcd4f48fc92476fd17dea7b616fd9995372e88D� � 6fc0812fc250d841a58cd125c88d60ba6c53d4c751c3c985ba925f28e597e5adD� � 47f19899e75c7c9a5b74f30643d69d0ccff2cf5451546d7ad1a727bccaaf0ea4 } } ��G}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �J��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�I}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�H}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�L�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�K��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�O��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�N��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��M���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�R}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�Q}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�P}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�U�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�T��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �S��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�X��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�W��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��V���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �\��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�[}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�Z}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�Y��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�^�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�]��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�a��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�`��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��_���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�d}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�c��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�b��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�g�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�f��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �e��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�j��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�i��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��h���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�l��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�k��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�n��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�m��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file X � � X ��q��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P�p�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�o�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�r}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�s}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��t}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �w��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�v}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�u}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��z��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P�y�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�x{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�{}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�|}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�~}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �[�{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [� {?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|� �u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o� }�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o Á}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |� �u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m� ��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [� {?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\� ��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��!}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �$��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ȁ}�#}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�"}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�&�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�%��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�)��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�(��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��'���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�,}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�+}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�*}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�/�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�.��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �-��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�2��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�1��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��0���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �6��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o Ё}�5}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�4}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�3��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�8�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�7��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�;��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�:��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��9���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�>}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�=��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�<��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�A�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�@��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �?��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�D��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�C��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��B���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�F��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�E��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�H��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�G��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file e �r+��V��: � � e D�, � 1838c4a50fba6cc7f01b473b8ebeaa6c7edb92cac0662a563b2b802ffa0fb3aaD�+ � 185387ed3f5744ba48ddfaf8a3d5ccc041f095dff1ea382c043dbe6835d3e739D�* � 26b65e8ddb2e0f1b106113ae92e86c40572c636fadb1825dfa21ea13c21ecc4cD�) � fe9ddea76d491834446326906a81c67139192d20db46b613104c60028b90693bD�( � 7362e3afa20e7270f6bd0843928dbc50fc58aee6b6187699194d02979a9c9b4bD�' � 56a814e3eeaf048c77ba188904c435aeaea3d62cc3a5cb3e815e9921e1d60166D�& � 0f9586b6d0d300edc438c789f89bb5cc08cc5ad9ef33210f4da2aa9cb0977f06D�% � 505e596b1b77d05f545fd3684fbdd8591bf9ca308db67ff0a6b36dd0a1341c17D�$ � d3b825ecf0857cf7486c9085c1579cac88394eb38dbc27d654ff8a989aa9f4f2D�# � 26057397691d0e4487c2c746c43e15367dce434090f9495b535dab7657e51a9cD�" � 0720c43c680146e7a676c6340d3f1529fb116ef0c12105b5b84f41a448512564D�! � 44df7609ed5e477add5d58e49530bb036fc2ff1d94098c85b2111eeb85a31168D� � 0b22b530fe470f3e466de0b4c9a662510b4feffc3540c2add9689e58fe543a56 X � � X ��K��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ہP�J�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�I�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�L}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�M}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��N}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �Q��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�P}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�O}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��T��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �P�S�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�R{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�U}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�V}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��W}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �Z��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�Y}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�X}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��]��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �[�\{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�[��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�^}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�_}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��`}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �c��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�b}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�a}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�f{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�e�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�d��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�g}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�h}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��i}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �l��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�k}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�j}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�n�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�m��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�q}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�p{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��o���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��r}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �u��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�t}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�s}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�w�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�v��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�z{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\�y��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��x���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��{}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �~��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�}}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�|}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |� �u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |� �u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o l� �y� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\� ��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group of oflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��) ��, ��/ ��2 ��6 ��8 ��; ��> ��A ��D ��F ��H ��K ��L ��M ��N ��Q ��T ��U ��V ��W ��Z ��] ��^ ��_ ��` ��c ��f ��g ��h ��i ��l ��n ��q ��r ��u �w �z �{ �~ � � � � � � � � � � � � �" �% �& �' �( �+ �. #�/ $�0 %�1 &�4 (�7 ,�8 -�9 .�: /�= 1�@ 2�A 3�B 4�C 5�F 7�H 8�K :�L ;�O =�Q >�T ?�U @�X B�Z C�] D�` F�c G�f H�j J�l K�o L�r N�u O�x P�z Q�| R� V� W� X� Y� [� _� `� a� b� d� h� i� j� k� m� n� ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|���q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y���k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o l� �y� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\� ��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�� ���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|� ��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y� ��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�"��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�!��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file X � � X ��%��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �P�$�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�#�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag -server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�&}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�'}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��(}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �+��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o �}�*}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�)}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��.��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �P�-�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�,{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding !-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss "d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�/}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�0}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��1}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �4��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o '�}�3}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�2}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��7��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa )[�6{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�5��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. *-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss +d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�8}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�9}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��:}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �=��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o 0�}�<}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�;}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�@{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�?�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�>��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�A}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�B}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��C}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �F��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o 6�}�E}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�D}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�H�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�G��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�K}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�J{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��I���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server e �r+��V��: � � e D�9 � 50b41570ec21f348d3c7adf1b62909fcf0674e4f13126166d7667664345d4f42D�8 � 908fa60367f005eeb06ef2422874df47c562ea782942062b68547373fdaa4040D�7 � 58790e773666a310f1c4417f46de1fb127437bce225ed0d9cbf6b4a08054ae98D�6 � d315bb2c28ee908b28dcdf583c02c6e2135a1e2a504eab6b1b0b1ea2366cd38cD�5 � 78d5b1f2129f41fe187e0ac04949364deea63d749d50862bb7767f1e00444a71D�4 � 5dd078d9c34f67aacb48cc5f22103833d14b4bfa4bc86f6a4d5ba09de9cdbdcbD�3 � e0fb73f01affcb06ca29acf2c378ce6d3035f42a90552ed157bd34ccf137226fD�2 � 6dcf38b2dd21eea79940f1fdaf48332d6c3ecaa1fd0add17464537dd24fef021D�1 � 5e7f113d0a50e93468c406b83d0079441feedc8fdc94a3867761526c5cf7b4adD�0 � 724104b78d65c37a7c944beaca3bddc2e94e0e2766838104816b951ec6b107c5D�/ � 133710e665511ae5f9d0928eba116d6f2d1f06f71afbe0e7013e3d46a1238e21D�. � 878d2dbcd884adb9e2de690242d04710df89bee67b51aa86e9468e01de78341bD�- � b11d559c42557a76fa28ec310e056c9da6ea2279ff9e9d2550f053c95a60eb4c } } ��L}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �O��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o <�}�N}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�M}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�Q�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�P��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�T{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\�S��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��R���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��U}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �X��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o A�}�W}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�V}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�Z�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�Y��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�]��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�\��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��[���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�`}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�_}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�^}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�c�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�b��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �a��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o E l� �y�f��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�e��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��d���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �j��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o I�}�i}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�h}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�g��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�l�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�k��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�o��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�n��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��m���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�r}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�q��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�p��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�u�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�t��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �s��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o M l� �y�x��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�w��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��v���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�z��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�y��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�|��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�{��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file X � � X ����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa S�P�~�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�}�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag T-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss Ud when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o� }�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o Z�}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa \�P��#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding ]-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss ^d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o� }�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!� }�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } �� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o c�}� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v� }�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa e[�{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. f-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss gd when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o l�}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!� }�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } �� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � � ��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o r�}� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v� }�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�"�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�!��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�%}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�${?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��#���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��&}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �)��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o w�}�(}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�'}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�+�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�*��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. . l�. [�.{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\�-��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��,���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } ��/}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �2��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o |�}�1}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�0}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�4�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�3��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�7��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�6��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��5���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server & �'& �}�:}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�9}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue\�8}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.10a�*@- Roll in CentOS Branding ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�=�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�<��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �;��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�@��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�?��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��>���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server w �� w � �D��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�C}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset\�B}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.11b��@- Roll in CentOS Branding�y�A��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�F�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�E��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. l� �y�I��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�H��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��G���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server � � \�L}?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.12cb[�- Roll in CentOS Branding�|�K��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�J��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group e �r+��V��: � � e D�F � 31535d62fcdd33c68d7c941c0b2b9e56b4f4749c5c04518d19b67a70214a8012D�E � b4ef197940e3c4fa8fa6153875480c974b0ffa36f4534e7c04d901e91440e53cD�D � 46fcca6c6687e1d7465d0f99ea219de21f84bde74cc822721a5e55a13bf97a0cD�C � e85016af12ca079ec7dcd10cfe41ca3eb0ae74f337e7db981ea8289ce132cc0bD�B � 1b0076a98d327d7bc0db69b985d05e02f9d0e927d5d7645ad2a14dba64ceaf52D�A � 76813e1abc18c641eb46092531885c18b9c6ddd5e9dc4e228b79d8c1701b18aaD�@ � 3b2f3d7b1d885c5edc646e442aa9d94f1445bf4eedc14e0b85c4b0d8f69524a8D�? � dab287aa189bc4e289c79998917467ba4a97037e00fe28be6d93e2537aed7bb7D�> � 98fb1fad0191aec5d51055b0a98b319339dfdb3295a687465da5a1122d7998b7D�= � 4f37e8e35d62af3023fa7e8393ded5ec181f09c19bbdf8f8210919d800c883acD�< � 97cdaffa439041e92b0a8642fd10637591e412ee471c5dd1572dd88e2d6decc7D�; � 78c54e3e24da878a2395d1db2fe940598eade355a2ed7955fe408e1151a3bdebD�: � c8dfb7c69048e40d89f055121f7bf399c85c51f08160824fe50d9434c253a4a3 ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service d � � d |�O�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�N��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.� �M��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o � l� �y�R��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10a��@- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server - Fix cert_request for KDC cert - Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets - SMB: switch IPA domain controller role�\�Q��3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ��P���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server �|�T��q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12c=q�- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results - idviews: use cached ipaOriginalUid value when resolving ID override - Resolves: 2124369 - OTP token sync always returns OK even with random numbers - ipa otptoken-sync: return error when sync fails - ipatests: add negative test for otptoken-sync - ipatests: python2 does not support f-strings - Fix otptoken_sync plugin�y�S��k�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11bzS�- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules - WebUI: Add confirmation dialog for changing default user/host group � �� �a�V��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14d ?@- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context - ipaserver: deepcopy objectclasses list from IPA config�V�U��%�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13dJ�- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation - Defer creating the final krb5.conf on clients - Move client certificate request after krb5.conf is created - server install: remove error log about missing bkup file X � � X ��Y��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P�X�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents�a�W�E�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7]��- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7] - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed - Do not run trust upgrade code if master lacks Samba bindings - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8] - Make sure to have storage space for tag �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�Z}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�[}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��\}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �_��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�^}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�]}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service _ ��_ ��b��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa ��P�a�#�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7]�- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP - trust upgrade: ensure that host is member of adtrust agents[�`{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.4`P��- Roll in CentOS Branding �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�c}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�d}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��e}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �h��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�g}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�f}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service B �B ��k��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7^y�@- Resolves: #1754902 - Running ipa �[�j{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.5`���- Roll in CentOS Branding�m�i��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6 - Resolves: #1404770 - ID Views: do not allow custom Views for the masters - idviews: prevent applying to a master - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems - install/updates: move external members past schema compat update - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA - pkinit setup: fix regression on master install - pkinit enable: use local dogtag only if host has CA - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL - ipa-cacert-manage man page: fix indentation - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas - adtrust.py: mention restarting sss �d when adding trust agents - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode - Use default ssh host key algorithms - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client - smartcard: make the ipa-advise script compatible with authselect/authconfig - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN - upgrade: fix ipakra people entry 'description' attribute - krainstance: set correct issuer DN in uid=ipakra entry - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help - ipa-server-certinstall manpage: add missing options - Resolves: #1206690 - UPG not being enforced properly - ipa user_add: do not check group if UPG is disabled - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collap se data-parent attribute - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements - WebUI: Fix notification area layout - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password - Fix indentation levels - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - Don't save password history on non-Kerberos accounts �o�l}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�m}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��n}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �q��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�p}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�o}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service 2 �2 [�t{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.6`�[�- Roll in CentOS Branding|�s�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�r��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. �o�u}�c�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7^��- Resolves: #1819725 - Rebase IPA to latest 4.6.x version - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None." - Resolves: #1817922 - covscan memory leaks report - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents - Resolves: #1817918 - Secure tomcat AJP connector - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd � � �!�v}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords } } ��w}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 Y �� Y � �z��;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�y}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�x}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |�|�u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m�{��U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l � �!�}�G�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7^��@- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service - Add interactive prompt for the LDAP bind password to ipa-getkeytab - CVE-2020-1722: prevent use of too long passwords[�~{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.7`���- Roll in CentOS Branding��}���Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server } } �� }��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7^���- Resolves: #1834385 Man page syntax issue detected by rpminspect - Man pages: fix syntax issues - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case - Make check_required_principal() case-insensitive - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3 - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� p� q� s�" t�% u�& v�) x�+ y�. z�/ {�2 }�4 ~�7 �: ��= ��@ ��D ��F ��I ��L ��O ��R ��T ��V ��Y ��Z ��[ ��\ ��_ ��b ��c ��d ��e ��h ��k ��l ��m ��n ��q ��t ��u ��v ��w ��z ��| �� �� �� �� �� �� �� �� ��" ��' ��- ��3 ��: ��@ ��F ��L ��R ��X ��^ ��d ��k ��q ��x ��~ �� �� �� �� �� ��# ��* ��0 ��6 ��< ��B ��F ��L ��P ��V ��Z ��` ��d ��j ��n ��t ��x ��~ �� �� �� �� �� �� �� ��& ��* ��0 ��4 ��: ��> ��D ��H ��N ��R ��X ��\ ��b Y �� Y � ���;�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.4`��- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing - wgi/plugins.py: ignore empty plugin directories - Resolves: #1895197 improve IPA PKI susbsystem detection by o ��}�}��Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7^�W@- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset�v�}�q�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7^�3�- Resolves: #1842950 ipa-adtrust-install fails when replica is offline - ipa-adtrust-install: avoid failure when replica is offline - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method - WebUI: Apply jQuery patch to fix htmlPrefilter issue ther means than a directory presence, use pki-server subsystem-find - Improve PKI subsystem detection - ipatests: add test for PKI subsystem detection - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember - Add more indices - Resolves: #1884819 IdM Web UI shows users as disabled - fix cert-find errors in CA-less deployment - Resolves: #1863619 CA-less install does not set required permissions on KDC certificate - CAless installation: set the perms on KDC cert file - ipatests: check KDC cert permissions in CA less install - Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution - WebUI: Fix jQuery DOM manipulation issues - Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts - fix iPAddress cert issuance for >1 host/service � � |��u�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6`�q�- Resolves: #1959349 - Need to bump pki + ds version�m���U�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.5`lM@- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry(). - ipa-kdb: fix compiler warnings - ipa-kdb: add missing prototypes - ipa-kdb: reformat ipa_kdb_certauth - ipa-kdb: mark test functions as static - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - Resolves: #1835741 krb5kdc crashing on ipa server - Resolves: #1929372 krb5kdc is crashing intermittently on IPA server. � l�. � ~� i��Michal Ruprich <mruprich@redhat.com> - 3.1.6-1X���- Resolves: #913329 - [RFE] include iperf3 in RHEL 7 - initial build[�{?�CentOS Sources <bugs@centos.org> - 4.6.8-5.el7.centos.9aex�- Roll in CentOS Branding�\���3�Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9a8��- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT - extdom: return LDAP_NO_SUCH_OBJECT if domains differ�����Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7`��- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character - CA less installation: non ASCII chars in CA subject - ipatests: use non-ascii chars in CA-less install - Resolves: #1974328 - Revise PKINIT upgrade code - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server 9 B�� � 9 ��=�{�Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding requires to spec file for devel package�:�i� �Michal Ruprich <mruprich@redhat.com> - 3.1.7-1X�C�- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding latest version before including iperf3 in RHEL-7~� i��Michal Ruprich <mruprich@redhat.com> - 3.1.6-1X���- Resolves: #913329 - [RFE] include iperf3 in RHEL 7 - initial build�� ]�5�Stepan Broz <sbroz@redhat.com> - 3.1.7-3d��@- Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403)�� =�{�Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding requires to spec file for devel package�:� i� �Michal Ruprich <mruprich@redhat.com> - 3.1.7-1X�C�- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding latest version before including iperf3 in RHEL-7 � t�5� � ~�i��Michal Ruprich <mruprich@redhat.com> - 3.1.6-1X���- Resolves: #913329 - [RFE] include iperf3 in RHEL 7 - initial build��]�5�Stepan Broz <sbroz@redhat.com> - 3.1.7-3d��@- Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403)��=�{�Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding requires to spec file for devel package�:�i� �Michal Ruprich <mruprich@redhat.com> - 3.1.7-1X�C�- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding latest version before including iperf3 in RHEL-7~�i��Michal Ruprich <mruprich@redhat.com> - 3.1.6-1X���- Resolves: #913329 - [RFE] include iperf3 in RHEL 7 - initial build��]�5�Stepan Broz <sbroz@redhat.com> - 3.1.7-3d��@- Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403) ] B��` � ] W� eM�Josef Ridky <jridky@redhat.com> - 0:1.8.18-4X�+�- Fix RPMDiff issues and rebuild�%�e�g�Josef Ridky <jridky@redhat.com> - 0:1.8.18-3X��@- Fix issues with warning: dereferencing type-punned pointer will break strict-aliasing rules from RPMDiffR�eC�Josef Ridky <jridky@redhat.com> - 0:1.8.18-2X���- Fix issue in file sources_�e]�Josef Ridky <jridky@redhat.com> - 0:1.8.18-1X� @- New upstream release 1.8.18 (#1398658)��]�5�Stepan Broz <sbroz@redhat.com> - 3.1.7-3d��@- Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403)��=�{�Michal Ruprich - 3.1.7-2X@- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding requires to spec file for devel package�:�i� �Michal Ruprich <mruprich@redhat.com> - 3.1.7-1X�C�- Related: #913329 - [RFE] include iperf3 in RHEL 7 - adding latest version before including iperf3 in RHEL-7 � ���'� � � �"k�S�Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10a�{�- Protect against negative values to memmove that caused "ipmitool sol activate" to crash against an IBM DataPower appliance (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519) Cherry-picked from upstream PR#78.i�!sc�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-9^_�@- Disable -fstrict-aliasing (RPMDiff issue)^� sM�Václav Doležal <vdolezal@redhat.com> - 0:1.8.18-8^^F�- Backport fix for CVE-2020-5208o� e}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-7Zy��- Remove debug prints shown without -v option (#1483163)�� e�=�Josef Ridky <jridky@redhat.com> - 0:1.8.18-6Y�{�- Hide unrequested verbose output (#1483163) - Fix doc for check input values (#1495098)o� e}�Josef Ridky <jridky@redhat.com> - 0:1.8.18-5X�s�- Remove RPMDiff fix file (#1439269) related to #1398658 � 2]� � ��'i� �Sinny Kumari <skumari@redhat.com> - 2.4.14.1-1X���- Resolves: #1384382 - [7.4 FEAT] iprutils package update - ppc64/ppc64le��&i�E�Sinny Kumari <skumari@redhat.com> - 2.4.13.1-1W�:�- Rebase to upstream release 2.4.13.1 - Resolves: #1369259 - Fix known zeroed state tracking�/�%i�w�Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1W�t@- Resolves: #1364131 - Integrate various important bug fixes for iprutils in RHEL7.3 by updating iprutils to 2.4.12�Q�$i�;�Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1W �- Resolves: #1274367 - [7.3 FEAT] iprutils package update - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line�J�#a�5�Jakub Čajka <jcajka@redhat.com> - 2.4.8-1U�J@- Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format b ���; � b \�-iS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updatesw�,[��Than Ngo <than@redhat.com> - 2.4.17.1-3]9��- Resolves: #1763626 - iprconfig hangs while raiding drives on crow3Y�+[[�Than Ngo <than@redhat.com> - 2.4.17.1-2\{��- Related: #1643408 - fix rpmdiff issue`�*[i�Than Ngo <than@redhat.com> - 2.4.17.1-1\w�@- Resolves: #1643408 - iprutils package update� �)i�/�Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1[(�@- Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive - Resolves: #1521052 - iprutils package update for POWER - Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices - Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDst�(i��Sinny Kumari <skumari@redhat.com> - 2.4.15.1-1Y� �- Resolves: #1456500 - iprutils package update to 2.4.15.1 ' �} � ' �N�3i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �2i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��1i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�0i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��/i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�.i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition) Z�n$ � w�:i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��9i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�8i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)\�7iS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updates}�6i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�5im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�4i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2) e �r+��V��: � � e D�S � 147c8de55409cc60a709e9f72364ee69759e7361564a732c0fd192e6fdd46d75D�R � 092cc13ed7af9de7e0332c1da0285f190396f1b75256ecd162899d06cf9b0e1aD�Q � d65cdceba1822f154d19bc4845ed70da24d2b51bcaadb12af03fe2668101a3eaD�P � ddf90c0ec436cf18228ba0646f73776e9a121426e0c05038fb1f4378646ff646D�O � e1163c5b5240558b24ddea7085492d62d63dd722ce6b4775724583c2ebcffdf2D�N � a551edad1e9e549e9010c83ff60ebed361a870676f10b405c22b4a301de84699D�M � 596e62671849cfd110b4ac4c57b171fec5bb07301be496f20b9b86d591947ebeD�L � 1eac2001120394176840294e989343eb699519e8284843a3cdd14f5fb3f39a95D�K � 7d3b3df85df3f1d47ab959aa42eea6f3302b166b9e37ef92779c1c8acedfd671D�J � 0e0b806579667e86ea70685a838f8c23073e5084c9c3135588b05d5d395ec9d3D�I � 73be1cce35dd9bd5fb59093ba5faf459b1f723fec8ccad9d13b18e6e1b249b10D�H � 30f252a9be101e11f5009f24025e69ac8850c0e429134629fceda20f9508a261D�G � 559d3f3c580f94eb5e25df5db277b1e4076d0d1911bd304941680178b21d9e5f � n�r � }�@i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�?im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�>i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�=i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �<i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��;i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forking ' �} � ' �N�Fi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �Ei��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��Di�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�Ci��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��Bi�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�Ai�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition) g Z�n� � g ��Li�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�Ki�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)� �Ji�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�Ii��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�Him�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�Gi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2) � ��p� � � i�Rim�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�Qi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�Pi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �Oi��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��Ni�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�Mi��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session � ��d�X � � �Xi��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��Wi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�Vi��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��Ui�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition� �Ti�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�Si��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once � .� � � w�^i��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� �]i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�\i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�[im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�Zi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�Yi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value l t�h� l �"�di�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�ci�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �bi��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��ai�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�`i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��_i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition 4 �� � � 4 ��ki�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�ji�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)\�iiS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updatesw�hi��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� �gi�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�fi��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�eim�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement � ��p� � � i�qim�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�pi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�oi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �ni��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��mi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�li��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session �!6�0 � � �xi��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��wi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�vi��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��ui�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�ti�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)\�siS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updates}�ri��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once % .� � � % ��~i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�}i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)}�|i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�{im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�zi�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�yi�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value � ��p� � � i�im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening�� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session m ��y � m �� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw� i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)� �i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once � |�� � � �i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"� i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� � i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening l t�h� l �"�i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition r �� ~ r �� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw� i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure conditionw�i��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� �i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement � |�� � � �#i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�"i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�!im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"� i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N� i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� � i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening �'<�6 � � �*i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��)i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�(i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��'i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�&i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)\�%iS�Chris Leech <cleech@redhat.com> - 6.2.0.874-11\�@- 1649401, 1649413 iscsiuio updatesw�$i��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file % .� � � % ��0i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition�g�/i�g�Chris Leech <cleech@redhat.com> - 6.2.0.874-12][�- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel - 1624670 Login negotiation failed due to CHAP_N values do not match (rec update race condition)}�.i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�-im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�,i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�+i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value � ��p� � � i�6im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�5i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�4i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value� �3i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��2i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�1i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session � ��d�X � � �<i��Chris Leech <cleech@redhat.com> - 6.2.0.874-16]�W�- upstream iscsiuio/configure.ac changes were breaking build hardening��;i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-15]�@- 1396651 Update service files, support sd_notify instead of pid files, stop forkingw�:i��Chris Leech <cleech@redhat.com> - 6.2.0.874-14]x�- 1598647 update boot gateway information during sync_session��9i�)�Chris Leech <cleech@redhat.com> - 6.2.0.874-13]_�@- 1724579 iscsiuio update, allow processing requests in DHCP failure condition� �8i�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�7i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at once e �r+��V��: � � e D�` � ed293f56a8fa1ff864e007c158a2833d672efa0618a2cd57b24f8ee570b7df80D�_ � b91c19d3211778e075a890f5366a6f8e279f0f8516238accd9f976e88ae5d259D�^ � 55b8fbe53a3211935d82bafb555f9585fbe02d4aad743ea7bfe9b68c31fff322D�] � 3820c04e5244db590096c735cfebaf9c275d7ef5d644f71712940bd565f671e7D�\ � c5658a365bac1d6a010849f23983b9904b689b2d9191ee2bb6e12c828ec3855dD�[ � 467ea07622b7bd1dc0694405f23e3047a904f677d60e58b4778fc8e889c2d224D�Z � 4a764611d924b3be2baab6d6ffd5fc562fe6a7c2c08cede4d58bb7259f7a0f35D�Y � 0daf2f065c20c572dbd4c2cd864cef8c197f640a926ce017c7343205b4e5e77dD�X � 829050a62694fea5287076cdabeec66b15fe994809fcdd5931ebb992d47fecd4D�W � f6017656fae735dfc5831c4b635cb2dda2cae8615a1d0a4b66898f7a6b9f168bD�V � b41a681dfb0b8b82973c7815eeee4cc5e3fc5e27cb13f55d251186c29146a4f3D�U � 447681bd8d74b001a4a5461694a948bba8dce453c2c054b8fb5d38408b7888a3D�T � 144001826455a5ca11b8e1701396ee66db5af5d0c7831453aba1309eb708a6c2 � .� � � w�Bi��Chris Leech <cleech@redhat.com> - 6.2.0.874-22a^�@- 1946578 fix segfault on case mismatch in config/record file� �Ai�1�Chris Leech <cleech@redhat.com> - 6.2.0.874-21a�- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning}�@i��Chris Leech <cleech@redhat.com> - 6.2.0.874-20_ts@- 1881245 iscsiadm regression when discovering many targets at oncei�?im�Chris Leech <cleech@redhat.com> - 6.2.0.874-19^��@- 1851250 fix libiscsi for libcrypto requirement�"�>i�]�Chris Leech <cleech@redhat.com> - 6.2.0.874-18^���- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)�N�=i�5�Chris Leech <cleech@redhat.com> - 6.2.0.874-17]��@- 1518367 boot from iSCSI not establishing all sessions persistently - 1667965 A manual restart of iscsi.service modifies records node.startup value + � �F�F�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�E��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �D��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�C���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�L� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��K��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�J�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��I��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�H�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�G��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�P�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�O��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �N��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�M���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�V� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��U��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�T�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��S��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�R�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�Q��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�Z�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�Y��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �X��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�W���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�`� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��_��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�^�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��]��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�\�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�[��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�d�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�c��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �b��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�a���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�j� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��i��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�h�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��g��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�f�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�e��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�n�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�m��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �l��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�k���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�t� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��s��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�r�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��q��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�p�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�o��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�x�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�w��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �v��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�u���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�~� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��}��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�|�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��{��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�z�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�y��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F��� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(���O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� � ��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q����Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T���'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F� �� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(� ��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� � ��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q� ���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T� ��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F��� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(���O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� ���+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q����Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {� � o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)����5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m��[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)����5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t��i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T���'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F� �� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(� ��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� � ��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q� ���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�&� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��%��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�$�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��#��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�"�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�!��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�*�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�)��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �(��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�'���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�0� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��/��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�.�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��-��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�,�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�+��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�4�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�3��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �2��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�1���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�:� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��9��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�8�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��7��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�6�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�5��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) e �r+��V��: � � e D�m � c5741b7e80a2b537f19292e12c2a7fc0a403f25be8a24c117ecec3e7b88a182aD�l � bc12fc1a4e756efa8689dfeed9925dee6bea368e4e5e865c6972641a3d1f894dD�k � fde70f28b5a0ce727403a12e9a6a39a8f953d1975000b7be4be8c5434c4d3556D�j � 830680293bf892ad9b57630cd1fd50d4415343677c361c32b8b849c399daeb14D�i � c38c420b6dbc3c61cd71784ca87f3a88f4a61d461e77b66508742c89d1d7e1fdD�h � ec2503de79ebe13134bfc568d71d9a2c99d9f6d109eb2f80a8198fb2e331bb9fD�g � a2e99881f1afb105ba6355f4eef86e839d3ccf60d9543490c748c71e96cb2256D�f � c017fccf387f4e86a1ff26de3d85c015ae1bdfc53bf1e30acf131d4aa4f5011fD�e � 83e709af69a954f17415b836c06c639e57234896cfbc5a9d849530590fd960efD�d � 13c3f114dacf10594cbfa9365b4107f3ea7e4dbc3dd4f7d0362049b983ea8f56D�c � 22bfec4ae12f95ec0baa30ad642504987294442f2a28150fd5c850b8aeb04373D�b � e6ffa74bab49f49dde242d6ce151c85a071ed9f55bbfe61e19f182d53a82496cD�a � 740cba8784afe4330523ae1c3ed41bce93c5537dad8f467cf1fdc17ea21f53e1 + � �F�>�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�=��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �<��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�;���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�D� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��C��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�B�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��A��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�@�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�?��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�H�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�G��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �F��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�E���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�N� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��M��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�L�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��K��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�J�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�I��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�R�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�Q��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �P��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�O���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�X� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��W��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�V�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��U��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�T�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�S��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) + � �F�\�� �Jan Stancek <jstancek@redhat.com> - 20190918-74.git6c6918a]� @- Update to latest upstream linux-firmware image for assorted updates - Update bnx2x firmware to latest upstream (rhbz 1720386)�(�[��O�Jan Stancek <jstancek@redhat.com> - 20190815-73.git07b925b]V��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356) - iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax - iwl7265-firmware sub-package merged into iwl7260-firmware sub-package� �Z��+�Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190429-72.gitddde598\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727) - linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)�Q�Y���Bruno E. O. Meneguele <bmeneg@redhat.com> - 20190318-71.git283373f\��@- Update to latest upstream linux-firmware image for assorted updates - cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422) � (�� � {�b� o�Augusto Caringi <acaringi@redhat.com> - 20200421-80.git78c0348_�- Update Intel Bluetooth firmwares (rhbz 1895787)��a��5�Jan Stancek <jstancek@redhat.com> - 20200421-79.git78c0348^�U@- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)m�`�[�Jan Stancek <jstancek@redhat.com> - 20200323-78.git8eb0b28^�k@- Set higher compression (rhbz 1817410)��_��5�Jan Stancek <jstancek@redhat.com> - 20200323-77.git8eb0b28^x��- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)t�^�i�Jan Stancek <jstancek@redhat.com> - 20191203-76.gite8a0f4c]��@- Fix missing firmware symlinks (rhbz 1783196)�T�]��'�Jan Stancek <jstancek@redhat.com> - 20191203-75.gite8a0f4c]�N@- Update to latest upstream linux-firmware image for assorted updates - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385) N D�:� � N � �h[�;�Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V�gY�U�Jarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� �fY�)�Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x�eY��Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� �dY�?�Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8�cY��Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274 � � {� � ��m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665��l[�O�Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699��k[�C�Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� �j[�;�Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b�i[m�Honggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412 w 0=� w ��r� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��q� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��p� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�o� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�n� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�t� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�s{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:�v�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�u�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � �(5 � ��z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�y� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�x� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��w� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665 � g�# � �-�~� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�}{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��|� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��{� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665 � � � �:� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w ��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0� �c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:� �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w ��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665�� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o� � �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 4 y� � 4 �:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 u !C� u � � � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z�� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 # s � # �E� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690�� {� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�� �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 � B�� � �Z�$� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�#� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:�"� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�!� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903 � B2C � ��(�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�'�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� �&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�%� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903 f B�f ��+� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�*� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:�)� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Kc � �:�.� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�-� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1�,� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 9 B�� � 9 �:�3� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081��2�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k�1�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:�0� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�/� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 o B$ o �1�6� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081��5� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�4� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081 � Z� � �:�:� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�9� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�8� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�7� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081 W s� W �:�?� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�>� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809��=��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024��<�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k�;�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201 e �r+��V��: � � e D�z � bd48e9a406f3a105ecd028149cc4b8df348dc33f19ec4151daa74115a22b11feD�y � 7a967bdf7823255236452e9a45977d7f6c253c9f3c88f18a80ae1ceb606319fdD�x � e6bd9014923fd5db4edcfc633f2800d2d9eda0bd0b416f22bfe615c9c8abf000D�w � 9c883d2d32a12c3f672b6e40119adf476d62ae4bacb40ce0a88634b864d19701D�v � bbc54477e470a694a3032e391624ba33b9753f81d283b60a19dca7c1c52b35c4D�u � efd5c472cec8f06ea30eaa8cef287b401fcdf4b0a30e6b2531888ea03f1f9549D�t � ef07f2b266e0d616931d672568f5c39d7789f51adb7332df77df77b19e7882a4D�s � e9fa16cde65d0d202fe417fb0585d64a534cd25d39e715a1fb32a75e6620e475D�r � dfee136c3e1717a2003cc2ab23a101250a304de173d85ce35e611d5481bc08efD�q � e43708faf11f54060a6b8d9ee565f6c43fdf9b7c1d5537257443dcfe58320462D�p � 880ff35253177a36cd35ad8763cde4cb91281f1e945561e8856f21de6d706dbbD�o � bea9e14dd6778afded7cb4e5d5a5f3fa3b0fefe9bafbf913cd21dd494fc8a966D�n � 2ef14c819a2c602bcce68d1f84b1e8143bb560f7737ba254e3b07d9c4302af67 � BL� � �j�C� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�B� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r�A� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�@� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � B�n � ��G��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024��F�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:�E� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�D� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 � -o� � �r�K� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�J� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:�I� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�H� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � BT� � �:�O� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�N� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j�M� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�L� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �OD � �9�S� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��Q�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��P�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 2 C��# 2 �m�X� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�W� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�V� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�U� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�T� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 f " q f ��\� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��[�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��Z�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�Y� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f C��# f �9�a� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�`� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�_� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�^� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�]� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 ^ 1 ^ �9�e� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��d�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�c� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�b� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 2 C��# 2 �m�j� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�i� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�h� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�g� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�f� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 � " � �P�m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��l�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�k� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f ��# f �9�q� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�p� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�o� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735�_�n�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 � Z�� � �Z�u� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�t� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�s� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�r� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_�x�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�w� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��v�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Z�� � �Z�|� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�{� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�z� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�y� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�~� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��}�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � +j\ � �"�� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 ^ CRt ^ ���'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � ?1t � �m�� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=� � �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � " � �P�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 of lflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��m ��r ��t ��v ��z ��~ �� � � � � � � � � � �$ �( �+ �. �3 �6 �: �? �C �G �K �O �S �X �\ �a �e �j �m �q �u �x �| !� "� #� $� %� &� '� )� *� +� ,� -�! .�$ /�' 0�) 1�- 2�0 3�2 4�4 5�7 6�: 7�< 8�? :�B ;�D <�F =�I >�L ?�N @�Q A�S B�V C�X D�[ E�] F�_ G�a H�d I�e J�g K�i L�k M�n N�o O�p P�r Q�u R�v S�x T�z U�| V� W� X� Y� Z� [� \� ]� ^� _� `� a�" b�' c�) d�, e�0 f�4 g�8 h�< i�@ k�C c � c � ���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 ^ CRt ^ ���'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_� �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=� � �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �m�!� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � " � �P�$� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��#�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�"� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�'� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�%�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �)��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �(��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 k P_� k ��-�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�,� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�+� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,�*�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 t �I t �Q�0� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�/�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�.� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �2��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�1� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�4�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �3��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 3 �� 3 �_�7�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��5�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 \ +j\ � �:��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�9� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�8� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�<�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �;��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 # 9# ��?�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M�>� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�=�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 e �r+��V��: � � e D� � 824340802392135f9a064de630acd55a619c7b8240b3aa7ae13f664637c0f023D� � 2bf9825999c7f3930c1032ad0b77786e49c18ee2996e142adc2d28d3b61709edD� � 3278f8dbfd0afa8e751afeffde943cb66ed2c2a57495f39ce66a95c3bf852edeD� � 542eec90efcf10ac7a2c505eed834595826e5ac255df60ccfed65594368d644cD� � 3a95d1dbf8e717a5e29b32daea78a11867867d80343e09ffc29f6c9dedd70720D� � 4261abb467f2744c5f43003c5dff6813e00cd4a52c72325f233dddfa3008e983D� � a58a0b8408d78f804c67f0633541c402b9020555a4986e3fde782bf8544f5f06D� � e4b6df13c59f0686bb12ef575deeaeb4ba581e4d0dd1d2595bf0d7ed9ad2e65fD� � e8b67a41970fcee6a5eee5fa362a4648b27e47a04ae221fba0de5f5bc2c64e37D�~ � 0ec52bd7a95347c5c330df35b5067f28cdd262383f84e176598367ad11c98a27D�} � 4e6c5997489d089dba27aefe96602ec7208298c2e48067c3ef634fd5a6da5f0dD�| � 7a53443e34cc7fe98a4371e9025389c86bc36e38ca424a98b85b4224bbcac1c8D�{ � f261f44a0301705f4e2b2a56556cdb340ae2487517c8ca12013301b3a983bd58 t �I t �Q�B� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�A�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�@� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �D��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�C� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�F�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �E��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 9 � �_�I�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M�H� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�G�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 \ +j\ � �L��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�K� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�J� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�N�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �M��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�Q� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�P� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�O�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 + � + �_�S�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n�R�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ +j\ � �V��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�U� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�T� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�X�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �W��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�[� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�Z� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�Y�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q�]� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n�\�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 1 ?1 � �_��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�^� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�a�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �`��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�d� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�c� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�b�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�e�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � e � �Q�g� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529��f�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 1 ?1 � �i��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�h� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�k�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �j��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�n� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�m� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�l�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�o�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e e ��p�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � q � �,�r�[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �q� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�u� �C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�t� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�s�g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�v�_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��x� �} Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��w�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 H @H �t�z�k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�y� �o Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � q � �,�|�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�� �CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�~� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�}�gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n� �_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��� �}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 p @H@ p �L�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�t��kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� �oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � y�G � �'� {�UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665�� � �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665�� � �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� �UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665 P � P �{� �yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-� � �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665 w B:j w �o�� �UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�:��wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665 ^ l�:� ^ �-�� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�{�UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665 � � � �:��wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w �� � �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665�� � �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� �UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-� � �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'� {�UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0�"�cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�!�wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{� �yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w ��'� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��&� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��%� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�$� �UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�#� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�)� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�({�UJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0�,�cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�+�wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�*�yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 4 y� � 4 �:�0� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�/� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E�.� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��-{� Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 u !C� u � �4� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�3� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z�2� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�1� �-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 # s � # �E�8� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��7{� Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690��6�7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�5�YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 � B�� � �Z�<� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�;� �-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:�:� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�9� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903 � B2C � ��@�7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�?�YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� �>� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�=� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903 e �r+��V��: � � e D� � 3831827b92fb33007bdf9bb579f1947d04221cf988fdfd40615012e00b9500a3D� � 89218a788c99c93aaa563b09b3f7b71ed061025bda32116e0f5ad78d034e5d94D� � 086c33b98ecb7adbc59297b29fb3fc219e4beda421611ef17471f6cc8e0a9b6fD� � 98887262492c65c2f5769777ce9b0419c04f0f6dbf264e6ea58451ec3eb69bd6D� � 6b024502ff2b69fb4876076ce49575439e5b94cae11c486cd7c59b464106d825D� � e648ee67624dc2ef09455b433a6f9e43ed3a673d6a32275422c2cd824c5d2e02D� � b62cc8d7fa7e89475ac858e1c622dd266841dcd23fd2841b274d435990854ddeD� � 3c68468d65b23e5a50cce88db5e3d11674fb488c8e0bf375200f6f529c438a20D� � fec7ec65b7db46bf359cb0e984f68dfa1d760320e274306052a510c5d288ed1aD� � 55baaa197af05067cb206423655392e7b0a52e3ee9144a1fde30de40eb599d5aD� � 3f7b46638efdb99c13fe45aa513af69cad728c4ffca568196d21fed273ba7f97D� � c50443dc25797f6103ba04c6929511b3b0ddfbc2d0ba5c3b956094079715ca98D� � 5aa6c18760291c5e22fa5fd2f7960f92c9547071b62e9766ae30bbe111f5e714 f B�f ��C� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�B� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:�A� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Kc � �:�F� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�E� �?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1�D� �YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 9 B�� � 9 �:�K� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081��J�7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k�I�YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:�H� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�G� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 o B$ o �1�N� �Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081��M� �+ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�L� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081 � Z� � �:�R� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�Q� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�P� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�O� �? Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081 W s� W �:�W� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�V� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809��U� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024��T�7 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k�S�Y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201 � BL� � �j�[� �K Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�Z� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r�Y� �[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�X� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � B�n � ��_� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024��^�' Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:�]� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�\� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 � -o� � �r�c� �[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�b� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:�a� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�`� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � BT� � �:�g� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�f� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j�e� �K Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�d� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �OD � �9�k� �i Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��j� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��i�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��h�' Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 2 C��# 2 �m�p� �Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�o� �i Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�n� �; Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�m� �i Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�l� �i Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 f " q f ��t� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��s�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��r�' Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�q� �+ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f C��# f �9�y� �i Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�x� �; Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�w� �i Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�v� �i Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�u� �i Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 ^ 1 ^ �9�}� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��|�' Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�{� �+ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�z� �Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 2 C��# 2 �m�� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"� � �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�~� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 � " � �P�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f ��# f �9� � �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735�_��AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 � Z�� � �Z� � �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m� � �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9� � �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"� � �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_��AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Z�� � �Z�� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_��AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � +j\ � �"�� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 ^ CRt ^ �� �'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z� � �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m� � �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9� � �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q�"� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�!�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P� � �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � ?1t � �m�&� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�%� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �$�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�#� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � " � �P�)� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��(�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�'� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�,� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�+� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�*�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �.�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 ^ CRt ^ ��2�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�1� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�0� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�/� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q�5� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�4�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�3� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�6� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �m�9� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� �8�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � " � �P�<� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��;�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�:� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�?� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�>� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�=�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �@�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 k P_� k ��E�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�D� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�C� �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,�B�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 e �r+��V��: � � e D�! � 7a5f1f1bd0da49fe22b1022a7bf998826161eacca343e82125f1b036b9cdbdacD� � 6982c05564f03f4db81df93b42eeb29b22e1c82675c42eaf1077f90bf1847c7aD� � 2c301bfa4814d7a20e642e7fec605dacbeef49885fa13f382cd7c85e03e827dfD� � 5c3e30fe5f331dff8d929397fe55cd6da4c97325fd1c26f6c51b2567a15414e5D� � a33d9ecd05eaa2248f7384075877e78357534a302081fc03a9b5f0dcc71df48fD� � 06d6c8fc8acd6bccaac9dcec5bc4fadf0a2b38f66fac335962e0352a7d2bf9bfD� � 60647855ba6fb280673a3654ce82ab9610ce8bcdca3ea825ad3ea4023b200fdcD� � ea3f0bb12ce7b5c386ca301b0f16f7dddafa4ed5f63b2ab2cd2fe297d066f387D� � 58f0137ac65f40eaa3ff281ba91bb68d78f71041a8ab7a9d08578d3ba06cc792D� � 054e750bc6d0c6d60f45a6fb60b3bc08bf7902623d269b106db0969e6a028abbD� � 56e522d6f6a849ac7522778022a72719f7d1b252990db7cf3bed6b06f753b096D� � 4f005504d21283f588231c70d4fdfecc7393a4b60fa72b1498f6aba2985e1d0bD� � 46de5f99129eb78da5ff4975f706a21b2b68e99ac0a5aba0c19ea1b67daa44c9 t �I t �Q�H� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�G�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�F� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �J�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�I� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�L�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 3 �� 3 �_�O�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�N� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��M�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 \ +j\ � �R�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�Q� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�P� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�T�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �S�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 # 9# ��W�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M�V� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�U�gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 t �I t �Q�Z� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�Y�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�X� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �\�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�[� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�^�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �]�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 9 � �_�a�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M�`� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�_�gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� m�K n�N o�R p�W q�[ r�_ s�c t�g u�k v�p w�t x�y y�} z� {� |� }� ~� � �� �� �� ��" ��& ��) ��, ��. ��2 ��5 ��7 ��9 ��< ��? ��A ��E ��H ��J ��L ��O ��R ��T ��W ��Z ��\ ��^ ��a ��d ��f ��i ��k ��n ��p ��s ��u ��w ��y ��| ��} �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� ��# ��% ��) ��. ��0 ��5 ��7 ��: ��? �A �D �H �L �P �T �X �[ �^ �c �f �j �o �s �w �{ � � � � � � � � �! �% �( �, \ +j\ � �d�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�c� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�b� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�f�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �e�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�i� �CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�h� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�g�gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 + � + �_�k�AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n�j�_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ +j\ � �n�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�m� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�l� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�p�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�s� �CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�r� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�q�gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q�u� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n�t�_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 1 ?1 � �w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�v� �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�y�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �x�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�|� �CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�{� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�z�gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�}�_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � e � �Q�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529��~�1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 1 ?1 � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=� � �qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,��[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�� �CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e e ���1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � q � �,� �[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� � � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f� � �C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r� �g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��� �} Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 H @H �t��k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� �o Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � q � �,��[ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�� �C Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��g Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��_ Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��� �} Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106���1 Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 p @H@ p �L� � � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�� � � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�t� �k Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� �o Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � y�G � �'�#{�U Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��"� �! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��!� �! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665�� � � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o� � �U Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665 P � P �{�%�y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-�$� �Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665 w B:j w �o�)� �U Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�(� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��'� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�:�&�w Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665 ^ l�:� ^ �-�.� �Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�-{�U Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��,� �! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��+� �! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��*� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665 � � � �:�0�w Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�/�y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w ��5� �! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��4� �! Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��3� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�2� �U Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�1� � Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�7� �Q Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�6{�U Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0�:�c Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�9�w Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�8�y Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w ��?� �!!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��>� �!!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��=� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�<� �U!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�;� �!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�A� �Q!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�@{�U!Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0�D�c!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�C�w!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�B�y!Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 e �r+��V��: � � e D�. � 96d0ea79b3da11f9b3d85598dae3187e501c54728cd8509492569f9dc2c1670fD�- � e1931c2c08f74962ec1d742c785c518f1942b86d552b9e27d9cb776d4c555f8aD�, � 758d2c3a908dc2f48b1ab2c25ec323231a54e2b646281ebbd88192b61617775eD�+ � 518082fd34ea1c14e44917a04af17aa6e3307369f369dbe369f0fdf4e5b8e1eaD�* � 5013f655f5321c66d30f6ab553d640e8a1df541105200e36eeae415ca903a7acD�) � f97dd6a530e0dc37dde8d1e71e04e877196e4f36ac6754904cd6a5e8e0e4990fD�( � 9512843f182c5c1950953d11669afc9c97394a90e3b4ebda1834fab7b5a97d88D�' � 5001584535af6ba52a00d1913b2b5f60df1239116a2cbcff84db48a9359bd3a3D�& � c6fc833a542f540c1edc0431e34f06b0cd121fc635294ae62ae5d48fab254ddfD�% � 242b3c3eb9d45d48b5e607845d5fbc380afca79449f49cf9cd801ea4a95ef419D�$ � 124b95517eeee9deb9fa4cef2707b16c5530d6c6f263462b2c3deb2f8811b3d8D�# � 917745f55091ed42757a3d445e0f98ebd8e84ff75ab716acbdd8f6e1c584a8fdD�" � 2e1ba328190cee6e94f98145224aec06902152d1cc3188f06c1ac84dc0887d0b 4 y� � 4 �:�H� �k"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�G� �k"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E�F� �"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��E{� "Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 u !C� u � �L� �"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�K� �k"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z�J� �+"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�I� �-"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 # s � # �E�P� �#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��O{� #Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690��N�7"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�M�Y"Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 � B�� � �Z�T� �+#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�S� �-#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:�R� �k#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�Q� �k#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903 � B2C � ��X�7#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�W�Y#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� �V� �#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�U� �k#Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903 f B�f ��[� �+$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�Z� �k$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:�Y� �k$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Kc � �:�^� �k$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�]� �?$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1�\� �Y$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 9 B�� � 9 �:�c� �k%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081��b�7$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k�a�Y$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:�`� �k$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�_� �k$Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 o B$ o �1�f� �Y%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081��e� �+%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�d� �k%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081 � Z� � �:�j� �k%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�i� �k%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�h� �k%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�g� �?%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081 W s� W �:�o� �k&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�n� �&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809��m�&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024��l�7%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k�k�Y%Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201 � BL� � �j�s� �K&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�r� �k&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r�q� �[&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�p� �k&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � B�n � ��w�'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024��v�'&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:�u� �k&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�t� �k&Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 � -o� � �r�{� �['Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�z� �k'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:�y� �k'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�x� �'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � BT� � �:�� �k'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�~� �k'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j�}� �K'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�|� �k'Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �OD � �9�� �i(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��� �(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���1(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735�� �''Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 2 C��# 2 �m�� �Q(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� �i(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�� �;(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�� �i(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� �i(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 f " q f �� � �)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735�� �1)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735�� �'(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z� � �+(Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f C��# f �9�� �i)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�� �;)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�� �i)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� �i)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9� � �i)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 ^ 1 ^ �9�� �i*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���')Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� �+)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� �Q)Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 2 C��# 2 �m�� �Q*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� �i*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�� �;*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�� �i*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� �i*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 � " � �P� � �*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809�� �'*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� �+*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f ��# f �9�!� �i+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9� � �i+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9� � �i+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735�_� �A*Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 � Z�� � �Z�%� �++Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�$� �Q+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�#� �i+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�"� �;+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_�(�A+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�'� �+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��&�'+Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Z�� � �Z�,� �+,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�+� �Q,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�*� �i,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�)� �;,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_�/�A,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�.� �,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��-�',Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � +j\ � �"�3� �;-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� �2�,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�1� �q,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�0� �,Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 ^ CRt ^ ��7�'-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�6� �+-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�5� �Q-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�4� �i-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q�:� �-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�9�A-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�8� �-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � ?1t � �m�>� �Q.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�=� �i.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �<�-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�;� �q-Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � " � �P�A� �.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��@�'.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�?� �+.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�D� �q.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�C� �.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�B�A.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �F�.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �E�.Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 e �r+��V��: � � e D�; � 030b52a92f3fd60b2df1b1fee6a964377bc4d80776dbdfcfae051132e0c3815cD�: � 811548ea9fa1b1fd4ba32a27977ce75a08bd90e1f90d50bbdfaabe36480c3f46D�9 � 2b1a27963b4d2d2d4589a7d96e361c8f4359cb51ad10f5e108215c381d491ba3D�8 � cb3ea59253d078a2c7a60ff6f6c3f55bf94679248c132be8e27c534245acd6c8D�7 � 1ab3f90a7eed6a0e8f44c9833e1def98bdbceb194f37062e21cfb6fb030563e2D�6 � 3b5a17995e4660d4c305944c4a13cd1bd8bdda18b9d69d13031b2b1044e1cd77D�5 � aa3730bd40f0c5b60ded75b15d9a0b7f845a26219a0a739f877d6d2ac7161c6fD�4 � 0c8fb84a63da81ffc9727d465f04ac197820bce6473ad8ca5f2d241c6cdfb9a7D�3 � 7de0016fd49560394d1c4f5584dd396e5b41989957702068ef31979934c299ddD�2 � f13d571f41792afa9d08465580b23f08ff7dd564e51f40e42a9b9f3a0ff77b62D�1 � 1f0f6113c67eb17059e2588bc76ce4d1ce793113d638c89faf42684d92ac2c3eD�0 � 6d23e0e03a7a536fe3cae17f34dc45960c361e2ee84b11158681f3db86dbb0b3D�/ � f0c9b7b923d47df8b92aa0c427d4754da9c2d22e9eb87e436c06305406998a3c ^ CRt ^ ��J�'/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�I� �+/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�H� �Q/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�G� �i/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q�M� �/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�L�A/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�K� �/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �O�/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�N� �q/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �m�Q� �Q0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� �P�/Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � " � �P�T� �0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��S�'0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�R� �+0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�W� �q0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�V� �0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�U�A0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �Y�0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �X�0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 k P_� k ��]�'1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�\� �+1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�[� �Q1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,�Z�[0Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 t �I t �Q�`� �1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�_�A1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�^� �1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �b�1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�a� �q1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�d�[1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �c�1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 3 �� 3 �_�g�A2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�f� �2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��e�'2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 \ +j\ � �j�2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�i� �q2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�h� �2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�l�[2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �k�2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 # 9# ��o�'3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M�n� 2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�m�g2Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 t �I t �Q�r� �3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�q�A3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�p� �3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �t�3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�s� �q3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�v�[3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �u�3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 9 � �_�y�A4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M�x� 3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�w�g3Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 \ +j\ � �|�4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�{� �q4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�z� �4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�~�[4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �}�4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�� �C4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M� � 4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��g4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 + � + �_��A5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n��_4Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ +j\ � ��5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �q5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� �5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,��[5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f� � �C5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M� � 5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r� �g5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q� � �6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n� �_5Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 1 ?1 � ��6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �q6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,��[6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�� �C6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� 6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��g6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��_6Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � e � �Q�� �7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529���16Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 1 ?1 � ��7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �q7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,��[7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f� � �C7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M� � 7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r� �g7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n� �_7Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e e �� �17Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � q � �,�"�[8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �!�8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�%� �C8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�$� 8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�#�g8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 of Sflrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� �3 �7 �: �> �A �D �F �J �M �O �Q �T �W �Y �] �` �b �d �g �j ��l ��o ��r ��t ��v ��y ��| ��~ �� �� �� � � � � � � � � � � � � � �" �% �& �( �* �, �/ �0 �2 �6 �; �= �A �F �H �M �O �R !�W "�Y #�\ $�` %�d &�h '�l (�p )�s *�v +�{ ,�~ -� .� /� 0� 1� 2� 3� 4� 5�$ 6�) 7�- 8�2 9�5 :�9 ;�= <�@ =�D >�G ?�K A�O B�R C�V D�Y E�\ F�^ G�b H�e I�g J�i K�l L�o M�q N�u O�x P�z Q�| R� � � �n�&�_8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��(� �}8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��'�18Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 H @H �t�*�k8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�)� �o8Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � q � �,�,�[9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �+�9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�/� �C9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�.� 9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�-�g9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�0�_9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��2� �}9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��1�19Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 p @H@ p �L�6� �:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��5� �:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�t�4�k9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�3� �o9Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � y�G � �'�;{�U:Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��:� �!:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��9� �!:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��8� �:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�7� �U:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665 P � P �{�=�y:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-�<� �Q:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665 w B:j w �o�A� �U;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�@� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��?� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�:�>�w:Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665 ^ l�:� ^ �-�F� �Q;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�E{�U;Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��D� �!;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��C� �!;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��B� �;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665 � � � �:�H�w;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�G�y;Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 e �r+��V��: � � e D�H � f22ced6e5193aa0b22495fa95e9de588c04f9afa2d6070faf801306fc7e68363D�G � c2800a0089be75b093cde6c6c8289a71707f6b56b3e1e3655e237dd5229856efD�F � 7fa5ad9d67b6a38b005e9e2a1e8217c78399fa4a6135965a3d32ed6d2ab0889cD�E � 1282baff4a36da2985cd30f9ea8f45ff5c8aa9ed747e858cf20363a7b30022abD�D � 769a4e98dcdf66de7159dd3adbff251c61fcb448ebdacbcc474122895e9cf709D�C � 2ced5602fa70385602b80de9a0a4dd9347186ade416907e8bb7fd066af18f6e3D�B � 00dfecc575f562ca6c58f3290ca7fda9b19bbacf629d7c687dc4242984f8bb37D�A � 8fab540ec8ac058e28cb3e62a08c210f00ce22695ad5a2b0412d48e0f77c285aD�@ � 2ff94d80fcae8e5f2ae6416eb0e955f4149e7639722b5426b2b8f12150cc14bbD�? � 313a86e45fc4b42084c618c11f233c1ab6950f5af7ce19f962ea3fd1020736ebD�> � da4cd5b16857b9f434f773471d103d61dba9fbe99a3264cfce051444c342cf1bD�= � 009c4fd4d1a151a215ef1a31eb4f5b076e16ad5bd1c6bed249571dfdde69a686D�< � bd09647e7e930afde068aa13eae3a3f7166bcf0d4918c52f525b47c511c7b692 w 0=� w ��M� �!<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��L� �!<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��K� �<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�J� �U<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�I� �<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�O� �Q<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�N{�U<Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0�R�c<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�Q�w<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�P�y<Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w ��W� �!=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��V� �!=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��U� �=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�T� �U=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�S� �=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�Y� �Q=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�X{�U=Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0�\�c=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�[�w=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�Z�y=Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 4 y� � 4 �:�`� �k>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�_� �k>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E�^� �>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��]{� >Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 u !C� u � �d� �>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�c� �k>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z�b� �+>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�a� �->Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 # s � # �E�h� �?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��g{� ?Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690��f�7>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�e�Y>Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 � B�� � �Z�l� �+?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�k� �-?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:�j� �k?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�i� �k?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903 � B2C � ��p�7?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�o�Y?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� �n� �?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�m� �k?Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903 f B�f ��s� �+@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�r� �k@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:�q� �k@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Kc � �:�v� �k@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�u� �?@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1�t� �Y@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 9 B�� � 9 �:�{� �kAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081��z�7@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k�y�Y@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:�x� �k@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�w� �k@Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 o B$ o �1�~� �YAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081��}� �+AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�|� �kAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081 � Z� � �:�� �kAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�� �kAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:� � �kAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�� �?AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081 W s� W �:�� �kBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�� �BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���7AAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��YAAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201 � BL� � �j� � �KBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:� � �kBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r� � �[BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�� �kBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � B�n � ���CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���'BAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:� � �kBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:� � �kBAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 � -o� � �r�� �[CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�� �kCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:�� �kCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�� �CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � BT� � �:�� �kCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�� �kCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j�� �KCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�� �kCAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �OD � �9�� �iDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��� �DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���1DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���'CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 2 C��# 2 �m� � �QDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9� � �iDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"� � �;DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9� � �iDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9� � �iDAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 f " q f ��$� �EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��#�1EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��"�'DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�!� �+DAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f C��# f �9�)� �iEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�(� �;EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�'� �iEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�&� �iEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�%� �iEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 ^ 1 ^ �9�-� �iFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��,�'EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�+� �+EAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�*� �QEAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 2 C��# 2 �m�2� �QFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�1� �iFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�0� �;FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�/� �iFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�.� �iFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 � " � �P�5� �FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��4�'FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�3� �+FAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f ��# f �9�9� �iGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�8� �iGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�7� �iGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735�_�6�AFAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 � Z�� � �Z�=� �+GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�<� �QGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�;� �iGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�:� �;GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_�@�AGAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�?� �GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��>�'GAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Z�� � �Z�D� �+HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�C� �QHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�B� �iHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�A� �;HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_�G�AHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�F� �HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��E�'HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � +j\ � �"�K� �;IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� �J�HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�I� �qHAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�H� �HAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 e �r+��V��: � � e D�U � e14e58cd6c0a61d873c99c10de7e5a36ec844b84147e4656a784e33c1b0715b4D�T � 81b502f5e282e58db43c00894f89f50523953165c64a408ef983aa2829145c7aD�S � 30f27f7cbabd3d9bee929e1fa43a3ac2a916c5a427598ee5e816dd100518994dD�R � ee0b6ee143ba37c13abc5858fef0725d5b30992afdcaff90babcd5af1ac812c8D�Q � 67c66396a0ecb57afd6c3a2f070e239f41c72943e3c3994c64e68c02a4cc1829D�P � 4b31ab8ebd6b1481a2299adfff2b7d616abc0233760f8745ec256b96b86d0077D�O � 7479424a5b57460d14eb031904fe5f6c5eacebff7fa6b708fb1b98b33a6b3900D�N � 496ca22ef6b436dbee6813613f31f2ebe1718fbe7c53d90796a6f3f18ee0a331D�M � 3fc86cf389acff5dfff9dfd65e25b9d96d358214bd2bd236061ed31d647ad9bbD�L � fd17cae7a3075f2ad58ed62ad9a2bb016b9d0ecbda3ed31b464e395e00f4dcb9D�K � 5435c138b53b3d77c61b682fd1142b6ebad9946a7aafbb1f722f6f9a4896a265D�J � e1e1b8adc5317dafcd61f9374708c3ef7388ecd2591a47bb2dfdedc0eee9d389D�I � 8b93611a7e50ab8b817c59d6ef504cf63f14b1ba210b4da69add3f3176898478 ^ CRt ^ ��O�'IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�N� �+IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�M� �QIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�L� �iIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q�R� �IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�Q�AIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�P� �IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � ?1t � �m�V� �QJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�U� �iJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �T�IAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�S� �qIAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � " � �P�Y� �JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��X�'JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�W� �+JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�\� �qJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�[� �JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�Z�AJAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �^�JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �]�JAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 ^ CRt ^ ��b�'KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�a� �+KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�`� �QKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�_� �iKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q�e� �KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�d�AKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�c� �KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �g�KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�f� �qKAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �m�i� �QLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� �h�KAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � " � �P�l� �LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��k�'LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�j� �+LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�o� �qLAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�n� �LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�m�ALAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �q�LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �p�LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 k P_� k ��u�'MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�t� �+MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�s� �QMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,�r�[LAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 t �I t �Q�x� �MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�w�AMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�v� �MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �z�MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�y� �qMAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�|�[MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �{�MAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 3 �� 3 �_��ANAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�~� �NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��}�'NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 \ +j\ � ��NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �qNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q� � �NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,��[NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 # 9# ���'OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M�� NAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��gNAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 t �I t �Q� � �OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_� �AOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� �OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � � �OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=� � �qOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,��[OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� � �OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 9 � �_��APAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M�� OAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��gOAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 \ +j\ � ��PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �qPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� �PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,��[PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�� �CPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�� PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��gPAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 + � + �_��AQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n��_PAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ +j\ � � �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=� � �qQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q� � �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,� �[QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� � �QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�#� �CQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�"� QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�!�gQAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q�%� �RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n�$�_QAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 1 ?1 � �'�RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�&� �qRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�)�[RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �(�RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�,� �CRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�+� RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�*�gRAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�-�_RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � e � �Q�/� �SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529��.�1RAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 1 ?1 � �1�SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�0� �qSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�3�[SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �2�SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�6� �CSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�5� SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�4�gSAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�7�_SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e e ��8�1SAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � q � �,�:�[TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �9�TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�=� �CTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�<� TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�;�gTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�>�_TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��@� �}TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��?�1TAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 H @H �t�B�kTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�A� �oTAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � q � �,�D�[UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �C�UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�G� �CUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�F� UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�E�gUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�H�_UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��J� �}UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��I�1UAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 p @H@ p �L�N� �VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��M� �VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�t�L�kUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�K� �oUAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 e �r+��V��: � � e D�b � a706d40bf0fcf24324c24d5742ca54450b84792752d49ed7af95192bcd3e4527D�a � 2f7c6c553d364083a3603f33a066c8031c3bc2f1e9c8bb2d64b355daf9a42c2bD�` � 71e8109b89c2bfa0c40687b649c02bd70e7702214ec1fb76fe606db76ace6affD�_ � 0a35810bd924f95ae2af1ba31051f64c8683e42b953329a6af07ea00495f96a2D�^ � c7627b2a018e4b1db2b6131608528eae404bf3c43ab252995b1d5f7196ab97e1D�] � 614205bf0041e0a5d32d64bd0743218a5ed52c6dcd8e5880076d87abff2016b2D�\ � bc495afc92d333d543576431a1cfc03dccc3bda5282057211d2065d0032129f1D�[ � f3ebae8493971694208c96d6d6286e660e797bed742700585d403ce9fd145072D�Z � 39bc056b01daeb577a1d13e5d56959179803eea2c53c39eeff982663bc189df1D�Y � 7afb4c27414189dd2a2cc1df1ce6c80ad77c0eb59aca381a22a3f4033f950c67D�X � 1497a77c838103e684f02aef90dea21228feaeec08fb162ab52cb8db75cd682fD�W � 97077fe95c5fd7927b97fea9e945e2065d9ef3dd5ca4eb757666fdc5b42ad749D�V � 56b0e8da36b334813521cd572d937eb75a589047d4c9a956b630d239792bf4e6 � y�G � �'�S{�UVJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��R� �!VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��Q� �!VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��P� �VAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�O� �UVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665 P � P �{�U�yVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-�T� �QVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665 w B:j w �o�Y� �UWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�X� �WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��W� �WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�:�V�wVAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665 ^ l�:� ^ �-�^� �QWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�]{�UWJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��\� �!WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��[� �!WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��Z� �WAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665 � � � �:�`�wWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�_�yWAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w ��e� �!XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��d� �!XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��c� �XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�b� �UXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�a� �XAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�g� �QXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�f{�UXJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0�j�cXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�i�wXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�h�yXAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 w 0=� w ��o� �!YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��n� �!YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��m� �YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�l� �UYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�k� �YAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 $ U$ �-�q� �QYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�p{�UYJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � �0�t�cYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�s�wYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�r�yYAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 4 y� � 4 �:�x� �kZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�w� �kZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E�v� �ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��u{� ZJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 of �flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� T� U� V� W� X� Y� Z� [� \� ]� ^� _� `�# a�% b�' c�) d�, e�- f�/ g�1 h�3 i�6 j�7 k�8 l�: m�= n�> o�@ p�B q�D r�G s�H t�J u�N w�S x�U y�Y z�^ {�` |�e }�g ~�j �o ��q ��t ��x ��| �� �� �� �� �� �� �� �� �� ��# ��' ��+ ��/ ��3 ��8 ��< ��A ��E ��J ��M ��Q ��U ��X ��\ ��_ ��c ��g ��j ��n ��q ��t ��v ��z ��} �� �� �� �� �� �� �� �� �� �� �� �� �� ��" ��$ ��& ��) ��, ��. ��1 ��3 ��6 ��8 ��; ��= ��? �A �D �E �G u !C� u � �|� �ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�{� �kZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z�z� �+ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�y� �-ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 # s � # �E� � �[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��{� [Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690��~�7ZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k�}�YZAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 � B�� � �Z�� �+[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�� �-[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:�� �k[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�� �k[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903 � B2C � ���7[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��Y[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� �� �[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�� �k[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903 f B�f �� � �+\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:� � �k\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:� � �k\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Kc � �:�� �k\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d� � �?\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1� � �Y\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 9 B�� � 9 �:�� �k]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���7\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��Y\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:�� �k\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�� �k\Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 o B$ o �1�� �Y]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081��� �+]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:�� �k]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081 � Z� � �:�� �k]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�� �k]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�� �k]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d�� �?]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081 W s� W �:� � �k^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O� � �^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809�� �^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024�� �7]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��Y]Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201 � BL� � �j�#� �K^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�"� �k^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r�!� �[^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:� � �k^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � B�n � ��'�_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024��&�'^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:�%� �k^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�$� �k^Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 � -o� � �r�+� �[_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�*� �k_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:�)� �k_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�(� �_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � BT� � �:�/� �k_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�.� �k_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j�-� �K_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�,� �k_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �OD � �9�3� �i`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��2� �`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��1�1`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��0�'_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 2 C��# 2 �m�8� �Q`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�7� �i`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�6� �;`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�5� �i`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�4� �i`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 f " q f ��<� �aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��;�1aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��:�'`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�9� �+`Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f C��# f �9�A� �iaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�@� �;aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�?� �iaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�>� �iaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�=� �iaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 ^ 1 ^ �9�E� �ibAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��D�'aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�C� �+aAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�B� �QaAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 2 C��# 2 �m�J� �QbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�I� �ibAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�H� �;bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�G� �ibAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�F� �ibAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 � " � �P�M� �bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��L�'bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�K� �+bAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 f ��# f �9�Q� �icAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�P� �icAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�O� �icAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735�_�N�AbAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 e �r+��V��: � � e D�o � 6182e47b9746410469ab21c90f69c924a80ceff0a394abd6a25a441e8d6cc49eD�n � b554df264228a60d69e256e2f70f55d320abe544bb18085a944c35b983f83b21D�m � 214fc2bc53e4979642949a2ce8ea6bd43bff20e98fa27016ae4ad1be3c189b60D�l � f154f7fbe4285c64fd5d8032253657798d0717ac258ce5a8ece9b6e798df388cD�k � d2490b1f0f83f60017971858b0aa1f5aba0285093f3b53cdaa0e5a1dd65b282bD�j � f82689a8168490ea030790e836a9ce025ac23d19836b5ef4eb2d441b7d99d8a0D�i � 11babb3c74159846537e70da4fb01e148e8741a334bdc4689a5eb16b24a1a181D�h � 12efe5e7e0fc2ad175b1c36f053e1a4532e1f85d27fe3489623cb945a5908677D�g � 5941cfa3708aa1d7eae457e8f0abc55a55d5a84eadb56473770f0a82215aa495D�f � c204a4ffd212c3a27c0afea8e7c43b386fac6da8dfb78049b8fff2cea01ea128D�e � 3d985b2d2ec13d506f3e32f82236c706a953bf9178605bd7e9c559e99fe33c06D�d � d17c2ab42cfa6667afaac7434e92be20fd0330b7a2cf8ad897daec993049f5e9D�c � a3cd127f94e232f4ccaddd486ee240986e25b65c51ab664b49ec511d5310482c � Z�� � �Z�U� �+cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�T� �QcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�S� �icAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�R� �;cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_�X�AcAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�W� �cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��V�'cAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Z�� � �Z�\� �+dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�[� �QdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�Z� �idAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�Y� �;dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 3 �� 3 �_�_�AdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�^� �dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��]�'dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � +j\ � �"�c� �;eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� �b�dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�a� �qdAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�`� �dAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 ^ CRt ^ ��g�'eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�f� �+eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�e� �QeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�d� �ieAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q�j� �eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�i�AeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�h� �eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � ?1t � �m�n� �QfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�m� �ifAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �l�eAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�k� �qeAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � " � �P�q� �fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��p�'fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�o� �+fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�t� �qfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�s� �fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�r�AfAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �v�fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �u�fAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 ^ CRt ^ ��z�'gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�y� �+gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�x� �QgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�w� �igAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 t �I t �Q�}� �gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�|�AgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�{� �gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � ��gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�~� �qgAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �m�� �QhAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� � �gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � " � �P�� �hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���'hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� �+hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�� �qhAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� �hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��AhAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � � �hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 k P_� k �� �'iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z� � �+iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m� � �QiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,� �[hAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 t �I t �Q�� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��AiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� �iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � ��iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �qiAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,��[iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��iAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 3 �� 3 �_��AjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�� �jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���'jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 \ +j\ � ��jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�� �qjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�� �jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,� �[jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 # 9# �� �'kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M� � jAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r� �gjAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 t �I t �Q�"� �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�!�AkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P� � �kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 1 ?1 � �$�kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�#� �qkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�&�[kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �%�kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 9 � �_�)�AlAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M�(� kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�'�gkAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 \ +j\ � �,�lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�+� �qlAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�*� �lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�.�[lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �-�lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�1� �ClAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�0� lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�/�glAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 + � + �_�3�AmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n�2�_lAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ +j\ � �6�mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�5� �qmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�4� �mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�8�[mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �7�mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�;� �CmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�:� mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�9�gmAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q�=� �nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n�<�_mAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 1 ?1 � �?�nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�>� �qnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�A�[nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �@�nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�D� �CnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�C� nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�B�gnAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�E�_nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � e � �Q�G� �oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529��F�1nAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 1 ?1 � �I�oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�H� �qoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�K�[oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �J�oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�N� �CoAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�M� oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�L�goAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�O�_oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e e ��P�1oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 e �r+��V��: � � e D�| � 46a04b65f068cbfdca98fdfb989911df818cda7f362078f3f1fdede4d819cc71D�{ � 8b0d31d3b3732537ed9539107e868dbb4725488aa14e7a5070bee4b31e133318D�z � 1724001fdb91ff6c4e1fcf64bccf981017dfd7ab649f21c1333810e6cbd8e9c6D�y � 029a613293d1ba49b765f0f2ec6fc0b71f6fd43fb1ceff50f43e05dc84f98d20D�x � bf1fe8afbf03b29de5f3eba68d356ac251478692658c6449b4cda08c73d4d4f8D�w � 5a11f15beb55665259230a77f5624af4b896062e2a61b610d31d355500431f88D�v � 60639db656637bac71a8495c83b9cc351c89b200e836ed3343dfa6bca29e3956D�u � 09c09056918a1d0fcf94103b7cc7f9728ea6f763a2c2d3db5a1a470846afc777D�t � 43d76c869fe744e94bf344aa66f638f4afcac144a43ed4d8336d4147ae3bb81eD�s � 29bd25debd6689e7eb9f2261280bdb1b0233f6d1bf8099f49d31d530c4432eb0D�r � e55f9021fa118e217df9db527f05fb35638c68975d0977584ac974b8c6a6bddfD�q � 6dce766bf15259d4d1a7aba1acd135a56d9bb61b6d653cef2da6590e890d9fd9D�p � ad1b644027e6c6f011f3ffcc714aa27825b548561a43f88debe325f3ed0dee5e � q � �,�R�[pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �Q�pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�U� �CpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�T� pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�S�gpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�V�_pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��X� �}pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��W�1pAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 H @H �t�Z�kpAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�Y� �opAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � q � �,�\�[qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �[�qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�_� �CqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�^� qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�]�gqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�`�_qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��b� �}qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��a�1qAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 p @H@ p �L�f� �rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��e� �rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�t�d�kqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�c� �oqAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � y�G � �'�k{�UrJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��j� �!rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��i� �!rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��h� �rAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�g� �UrAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665 P � P �{�m�yrAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-�l� �QrAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665 R Br � R ��r� �!sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��q� �sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�p� �UsAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�o� �sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�:�n�wrAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665 � g�� �-�u� �QsAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�t{�UsJiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��s� �!sAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � �0�x�csAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:�w�wsAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{�v�ysAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 4 y� � 4 �:�|� �ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�{� �ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E�z� �tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��y{� tJiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 u !C� u � � � �tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:�� �ktAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z�~� �+tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[�}� �-tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � s� � �:�� �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:�� �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���7tAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��YtAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 E �- E �d�� �?uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1�� �YuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081��� �+uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 9 B�� � 9 �� �7uAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k� �YuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:� � �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:� � �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�� �kuAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 0 u��& 0 �r�� �[vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:�� �kvAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:�� �kvAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�� �vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809�� �vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024 � BT� � �:�� �kvAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:�� �kvAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j�� �KvAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:�� �kvAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �OD � �9�� �iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��� �wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���1wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���'vAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 2 C��# 2 �m� � �QwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9� � �iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"� � �;wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�� �iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� �iwAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 � " O � �9�"� �ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�!� �ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735�� �'wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z� � �+wAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 � C�� � �m�&� �QxAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�%� �ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�$� �;xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�#� �ixAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735 � " � �P�)� �xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��(�'xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�'� �+xAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 I ��: I �m�-� �QyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�,� �iyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�+� �;yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_�*�AxAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 � " � �P�0� �yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��/�'yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�.� �+yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�3� �qyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�2� �yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�1�AyAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 f �5D f �Z�7� �+zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�6� �QzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�5� �izAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �4�yAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 3 �� 3 �_�:�AzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�9� �zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��8�'zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 \ +j\ � �=�zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�<� �qzAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�;� �zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �m�?� �Q{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� �>�zAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � " � �P�B� �{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��A�'{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�@� �+{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�E� �q{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�D� �{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�C�A{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �G�{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �F�{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 � P: � �P�J� �|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��I�'|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�,�H�[{Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 �� �=�M� �q|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�L� �|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�K�A|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �O�|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �N�|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 & PZ� & �_�S�A}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M�R� |Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�Q�g|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,�P�[|Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 e �r+��V��: � � e D� � 5b66719aa307b84457c7ac3edc58f4b71cc65248e0ef006e5fee0c3e52896b5fD� � 707c34f7fa9d4787f56722da43ebdb1458d9855c217691d5688c6bde0306a2b7D� � 575e728d855d72fba88b860be7518db2c8fa0dc1add9046074dd5d320e1156bbD� � be582ab129bf0e7739face571fb544ef2d038667883f4d15867fa2c2c302f748D� � c72c2effb396db8fd12fe1bf50dc5ae0543a4d684cc6990bc2a8f8c1c707bd2aD� � 9deefb8ac4e6a1d43c4894b9e5daf58d70b43a9f12952164dc89a1d15e5a400cD� � 0380151eff2395148f47a991620ec2bd74e74d330969f2c6d6c0a064a0278166D� � 895038cbd6764ef3eb9ee3cd61f7aeb95255a9dab0f3a8da8ecf81d235a2abc1D� � 3f73609586cbfb03e673487d50c8317cc03657e173b51bd38b9491c79062a838D� � 919e733f2ea0f03322ddd4ac6824dcb44dd6d5fcaabb66ccb9afee48b8b78718D� � 6a35640d03a1109ec551440c9e15e05aac57712c85cd6644b826678181e23b5dD�~ � b436b196f3c2735dddfe5727a948d1a2e443bdebffd7018905aa2558baba56d9D�} � 3daac146d8edbefdb34bcb729d74336de8f1afbaee929dc55464706da7615618 \ +j\ � �V�}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�U� �q}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�T� �}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 nf ;flrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|�������������������� �K �N �O �P �R �U �V �X �Z �\ �_ �` �b �f �k �m �r �u �x �| � � � � � � � � �" �& �) �- �0 �3 �7 �: �= �? �B �E �G �J �M �O �S ��V ��X ��[ ��] ��_ ��a ��d ��e ��f �h �k �l �n �r �w �y �~ � � � � � � � � �! �% �* �. �2 �5 �9 �< �? �C �F �I �K �N �Q �S �V $�Y %�[ &�_ '�b (�d )�g *�i +�k ,�m -�p .�q /�r 0�t 1�w 2�x 3�z 4�~ 5�� 6�� 7�� 8�� 9�� :�� � q � �,�X�[}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �W�}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�[� �C}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�Z� }Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�Y�g}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q�]� �~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n�\�_}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 1 ?1 � �_�~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�^� �q~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�a�[~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �`�~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�d� �C~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�c� ~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�b�g~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�e�_~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e e ��f�1~Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � q � �,�h�[Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�k� �CAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�j� Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�i�gAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�l�_Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��n� �}Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��m�1Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 p @H@ p �L�r� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��q� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�t�p�kAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�o� �oAndrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � y�G � �'�w{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��v� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��u� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��t� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�s� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665 P � P �{�y�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-�x� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665 R Br � R ��~� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��}� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�|� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L�{� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�:�z�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665 � g�� �-�� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'� {�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � �0��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062�:��w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 4 y� � 4 �:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690��{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 u !C� u � � � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z� � �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[� � �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � s� � �:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 E �- E �d�� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1�� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 9 B�� � 9 ���7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 0 u��& 0 �r� � �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O�� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024 � BT� � �:�!� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j� � �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:� � �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �OD � �9�%� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��$� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735��#�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735��"�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 2 C��# 2 �m�*� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�)� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�(� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�'� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�&� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735 � " O � �9�.� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9�-� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735��,�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�+� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 � C�� � �m�2� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�1� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�0� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9�/� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735 � " � �P�5� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��4�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�3� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 I ��: I �m�9� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�8� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"�7� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_�6�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 � " � �P�<� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��;�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�:� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�?� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�>� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�=�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 f �5D f �Z�C� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�B� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�A� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �@��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 3 �� 3 �_�F�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P�E� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��D�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 \ +j\ � �I��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�H� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�G� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �m�K� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� �J��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � " � �P�N� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��M�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�L� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=�Q� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�P� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�O�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �S��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �R��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 � P: � �P�V� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��U�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�,�T�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 e �r+��V��: � � e D� � dfa6a2ee9076eba358c12de54d5d936a15a282109538f6772bdb75582afd0584D� � 1112275758e024da6aed300ab9d35464cd221ed62c67a573bd71242d60a699bfD� � 109d66ff27fd10890453e0e8e39139cafcd73f6341aac559e6f00b019b08a12fD� � 1b30b4a38b3fef0e81dd1879d3e9b159f739eadedc3e869eb5947a4bd3b25968D� � fae889b06ab0ce312053475d9327bbc3ab774b5205f23a802574f40fb6dd1621D� � 05a1a1334799c302fd4621a4dab067e901b9fbea4d7d269ebc6e9bea8d855923D� � 0f67dd341c128a15768806e3944c813d90260a364561887b61378a18ff049547D� � 0a551f7e2a238413dc99c1846c2fa6ce5424327eb7cae6cffdcc8530fe613c92D� � 7a192ba7047354c7646edd4e2c5e44dc140a332186434319479f733ea0d3a469D� � c62386a6973d93798bd5a17ee72907932c0796c21589648ab5f313805f6ae46cD� � fa80c361dec771feb54951286af7bb8032aef89cd8ded021b942b091ad431e5dD� � 5c0a4fb7b658b9dca77b858ff98bd534bbc056c94aa438b11b253b1da80720a4D� � a3461547f0108720d6413695a5d1110d735d6a9359910eca40e788f625bab184 pi �insx}���������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� 9 : m* �8 �F �T �b p -~ B� V� n�% ��2 ��? ��L Y ցf �s �� � )� >�' S�4 h�A }�N ��[ ��h ��u у � � ��) �6 �C 1�P U�] u�j ��w �� �� ܄ �+ �8 .�E _�R p�_ ��l ��y �� ۅ � �- %�: >�G V�T o�a ��n ��{ �� ц �" �/ �< 4�I L�V _�c l�p y�} �� �� ��$ ��1 ��> χK ܇X �e �r 0� <� G� [�& n�3 ��@ ��M ��Z ��g Јt � �� � .�( I�5 d�B ��O ��\ ��i ҉v � � � �* (�7 9�D N�Q w�^ ��k ��x ܋ /� �� ً, 9�9 nl $9lrx~��������������������� &,28>DJPV\bhntz���������������������� "(.4:@FLRX^djpv|��������������������� ��S Ջ` �m �z 9� j� ��! Č. �; �H @�U v�b ��o ˌ| �� !� N�# x�0 ��= J ��W �d D�q i�~ �� �� َ% �2 (�? M�L w�Y ��f Îs � � 7� X�' ��4 ��A ͏N �[ *�h ��u � y� � X�) Ő6 3�C ��P �] ��j �w a� ӑ A� ��+ $�8 ��E �R l�_ ڑl P�y o� �� �� ��- ϒ: �G ��T �a I�n ��{ �� � 6�" y�/ ��< ��I ��V ϓc �p ��} � "� 7�$ K�1 `�> u�K ��X ��e ʔr � �� #� l�& ��3 ��@ !F�M !��Z !ٕg " �t "e� "�� "�� #?�( #��5 #ҖB #��O $�\ �� �=�Y� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_�W�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 c � c � �[��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� �Z��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 & PZ� & �_�_�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M�^� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�]�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695�,�\�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 \ +j\ � �b��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�a� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q�`� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � q � �,�d�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �c��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�g� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�f� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�e�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q�i� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n�h�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 1 ?1 � �k��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=�j� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � q � �,�m�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �l��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�p� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�o� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�n�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�q�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 e e ��r�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � q � �,�t�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �s��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 O 9 O �f�w� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M�v� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�u�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n�x�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 ^ e ^ ��z� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106��y�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 p @H@ p �L�~� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665��}� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�t�|�k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�{� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � x�D � �'��{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665 N � N �{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665�-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665 s A8g s �o�� � �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�EA- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea_�E@- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28. - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464 - Resolves: rhbz#1876665�:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665 Y k�7� Y �-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�� {�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665 � � � �:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 r /;� r ���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665���� �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665���� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o��� �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665 " T" �-��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'��{�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665 � � � �:���w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{���y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 W Kz� � W ��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b08-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b08 (EA). - Resolves: rhbz#1876665��� � ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b07-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b07. - Resolves: rhbz#1876665�o�� � �U�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea_���- Update to aarch64-shenandoah-jdk8u272-b06. - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3) - Resolves: rhbz#1876665�L��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea_�E@- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR - Resolves: rhbz#1876665�0���c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � f�� �-��!� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Include a test in the RPM to check the build has the correct vendor information. - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value. - Improve quoting of vendor name - Resolves: rhbz#1876665�'�� {�U�Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea_�9�- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Resolves: rhbz#1876665��� � �!�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u272-b09 (EA). - Resolves: rhbz#1876665 � � � �:��#�w�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1_��@- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour" - Resolves: rhbz#1876665�{��"�y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0_��- Update to aarch64-shenandoah-jdk8u272-b10. - Switch to GA mode for final release. - Update release notes for 8u272 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - Delay tzdata 2020b dependency until tzdata update has shipped. - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302 - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 : K� � : �:��'� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��&� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���%{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690�0��$�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0_�:�- Update to aarch64-shenandoah-jdk8u275-b01 (GA) - Update release notes for 8u275. - Resolves: rhbz#1895062 � Aa� � �:��+� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��*� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��)� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903�:��(� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903 ` ��` ���.�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��-�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963� ��,� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903 0 x� � 0 �:��2� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea_�`@- Update to aarch64-shenandoah-jdk8u282-b03 (EA) - Update release notes for 8u282-b03. - Resolves: rhbz#1903903�:��1� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b02 (EA) - Update release notes for 8u282-b02. - Resolves: rhbz#1903903�E��0� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01 - Resolves: rhbz#1901690���/{� �Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea_�j�- Added patch600: rh1750419-redhat_alt_java.patch - Replaced alt-java placeholder with real patched alt-java - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch - Both surpassed by new patch - Resolves: rhbz#1901690 q A� q � ��6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u282-b07 (EA) - Update release notes for 8u282-b07. - Fix placement issue in release notes, caught by comparing with vanilla version. - Resolves: rhbz#1903903�:��5� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea_��- Update to aarch64-shenandoah-jdk8u282-b06 (EA) - Update release notes for 8u282-b06. - Resolves: rhbz#1903903�Z��4� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea_�=�- Update to aarch64-shenandoah-jdk8u282-b05 (EA) - Update release notes for 8u282-b05 and make some minor corrections. - Resolves: rhbz#1903903�[��3� �-�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea_��@- Update to aarch64-shenandoah-jdk8u282-b04 (EA) - Update release notes for 8u282-b04. - Remove upstreamed patch PR3519 - Resolves: rhbz#1903903 � q� � �:��:� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��9� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081���8�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-1`&�- Cleanup package descriptions and version number placement. - Resolves: rhbz#1908963�k��7�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0`��- Update to aarch64-shenandoah-jdk8u282-b08 (GA) - Update release notes for 8u282-b08. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908963 B �+ B �d��=� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��<� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081���;� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081 4 A�� � 4 ���B�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��A�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��@� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��?� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081�:��>� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081 c A�c ���E� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea`S@�- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes. - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch. - Resolves: rhbz#1938081�:��D� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea`F�- Update to aarch64-shenandoah-jdk8u292-b05 (EA) - Update release notes for 8u292-b05. - Resolves: rhbz#1938081�:��C� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea`B @- Update to aarch64-shenandoah-jdk8u292-b04 (EA) - Update release notes for 8u292-b04. - Resolves: rhbz#1938081 � Ja � �:��H� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea`\{@- Update to aarch64-shenandoah-jdk8u292-b07 (EA) - Update release notes for 8u292-b07. - Resolves: rhbz#1938081�d��G� �?�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea`X��- Update to aarch64-shenandoah-jdk8u292-b06 (EA) - Update release notes for 8u292-b06. - Require tzdata 2020f due to JDK-8259048 - Resolves: rhbz#1938081�1��F� �Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea`S@�- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA) - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11. - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u. - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate. - Resolves: rhbz#1938081 g A�� � g ���M��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���L�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-1`pA�- Add CVE numbers. - Require tzdata 2021a due to JDK-8260356 - Resolves: rhbz#1938201�k��K�Y�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0`n�@- Update to aarch64-shenandoah-jdk8u292-b10 (GA) - Update release notes for 8u292-b10. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1938201�:��J� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea`c�- Update to aarch64-shenandoah-jdk8u292-b09 (EA) - Update release notes for 8u292-b09. - Resolves: rhbz#1938081�:��I� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea`_ @- Update to aarch64-shenandoah-jdk8u292-b08 (EA) - Update release notes for 8u292-b08. - Resolves: rhbz#1938081 � ,m� � �r��Q� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��P� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809�:��O� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��N� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809 � AR� � �:��U� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��T� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809�j��S� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��R� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809 � �]� � �:��Y� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b02 (EA) - Update release notes for 8u302-b02. - Resolves: rhbz#1967809�O��X� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea`��@- Update to aarch64-shenandoah-jdk8u302-b01 (EA) - Update release notes for 8u302-b01. - Switch to EA mode. - Resolves: rhbz#1967809���W��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-2`��@- Add JDK-8266929 backport for RH1960024. - Resolves: rhbz#1960024���V�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 e �r+��V��: � � e D�# � e2c654e3afba7eae27baf8ba94d32ce0d7b64ee9e4d712f07c55fe5511ac0e78D�" � 906005c50af3c97fba3c5a02b14b7ce32f662a5eafb00675e8750675b8323966D�! � ecf0213aa5f1df68903633d6e37f83ba74657dcdfef00998680e1d13d4107e9bD� � d8cc4f7ba48ecdc9de7b819650b043bff67e2a0f66f0100cff7b2021dfdb7019D� � cd7ecade58c83774da56075ecbc93181d0299693efa4a31b09f39a234ea8c0d8D� � 42a032cda37e42e63ccb183ecdaa7710140521828aa8549a8f19dd0bc7fbea36D� � 88bc32f0b32b7bb8891d9dd012f0481bd2103ca60cadb3ebc387b8645c331524D� � c2c9b259e70aede7a57ebe7fa8a93a475866d4cce68f6b903edb0875c829bc6cD� � fe81316791b5a33fb6e458bc981914e5a5c7d16da0e818f6b455b94fd257fbd8D� � eb68e76343740b950f6fb531ed5af6afc884e16c3ca61bdb35b1d2115d73f0c4D� � eb2e226e824b06855d4cf867531fb5f3409412d883d6e56543603660748ecfbbD� � 7f67e4364ed1e323c02f8bdeafb086bb8d6633c2da0a3139a1a54be82a87bdecD� � dfbc0cbaf5fb588c23fcfdacafa9024ed6efd13bfbb1cf69316269cbaee79463 � AJ� � �j��]� �K�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b05 (EA) - Update release notes for 8u302-b05. - Remove JDK-8266929/RH1960024 as now upstream. - Resolves: rhbz#1967809�:��\� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea`�\�- Update to aarch64-shenandoah-jdk8u302-b04 (EA) - Update release notes for 8u302-b04. - Resolves: rhbz#1967809�r��[� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea`� @- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA) - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23. - Resolves: rhbz#1967809�:��Z� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea`�h@- Update to aarch64-shenandoah-jdk8u302-b03 (EA) - Update release notes for 8u302-b03. - Resolves: rhbz#1967809 � A�k � ���a�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735���`�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0`�t�- Update to aarch64-shenandoah-jdk8u302-b08 (EA) - Update release notes for 8u302-b08. - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�:��_� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea`��- Update to aarch64-shenandoah-jdk8u302-b07 (EA) - Update release notes for 8u302-b07. - Resolves: rhbz#1967809�:��^� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea`�E�- Update to aarch64-shenandoah-jdk8u302-b06 (EA) - Update release notes for 8u302-b06. - Resolves: rhbz#1967809 �6x � �"��f� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��e� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��d� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��c� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���b� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735 Z BPq Z ���j�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��i� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��h� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��g� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 dX� � �9��o� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��n� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��m� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&A- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���l� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b01 (EA) - Update release notes for 8u312-b01. - Switch to EA mode. - Remove "-clean" suffix as no 8u312 builds are unclean. - Related: rhbz#1999735���k�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-1a;H�- Remove non-Free test and demo files from source tarball. - Related: rhbz#1999735 � Y�� � �Z��s� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��r� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��q� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��p� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 � �+m � �9��w� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9��v� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��u� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735���t�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 � Y�� � �Z��{� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��z� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��y� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��x� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735 0 �� 0 �_��~�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��}� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���|�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 a B�� a �9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.eaaP`�- Update to aarch64-shenandoah-jdk8u312-b04 (EA) - Update release notes for 8u312-b04. - Related: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.eaaM��- Update to aarch64-shenandoah-jdk8u312-b03 (EA) - Update release notes for 8u312-b03. - Related: rhbz#1999735�9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.eaaG&@- Update to aarch64-shenandoah-jdk8u312-b02 (EA) - Update release notes for 8u312-b02. - Related: rhbz#1999735 / ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 � �G � �"�� � �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 Z BPq Z ��� �'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� � �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m�� � �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 � >/� � �9��� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735�"��� �;�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.2.eaaQ�@- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999735� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 / ����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735 q �G q �Q��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_���A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 >/q �m�� � �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9�� � �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � ! � �P��!� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809��� �'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z�� � �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��$� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��#� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��"�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��&��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��%��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 Z BPq Z ���*�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��)� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��(� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�9��'� �i�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.eaaU��- Update to aarch64-shenandoah-jdk8u312-b05 (EA) - Update release notes for 8u312-b05. - Related: rhbz#1999735 q �G q �Q��-� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��,�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��+� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ <�� =�� >��! ?��# @��' A��+ B��. C��2 D��6 E��: F��= G��B H��E I��H J��M K��Q L��U M��Y O��] P��a Q��f R��j S��o T��s U��w V��{ W��~ X�� Y�� Z�� [�� \�� ]�� ^�� _�� `�� a��! b��$ c��& d��* e��- g��/ h��1 i��4 j��7 k��9 l��= m��@ n��B o��D p��G q��J r��L s��O t��R u��T v��V w��Y y��\ z��^ {��a |��c }��f ~��h ��k ���m ���o ���q ���t ���u ���w ���y ���{ ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���% ���( ���* ���. ���2 ���4 ���8 / >/ � ��/��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��.� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 ~ p ~ �m��1� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735� ��0��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � ! � �P��4� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���3�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��2� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929 �� �=��7� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��6� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��5�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366 a � a � ��9��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502� ��8��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422 g O]~ g ���=�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�Z��<� �+�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.eaaf�@- Add patch to improve performance of common separators in Scanner.useLocale - Move alt-java patch to correct section. - Resolves: rhbz#1862929�m��;� �Q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.eaaex�- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07 - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07. - Resolves: rhbz#1999735�,��:�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383 q �G q �Q��@� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��?�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��>� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��B��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��A� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��D�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��C��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 0 �� 0 �_��G�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��F� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809���E�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826 Y *hY � ��J��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��I� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��H� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��L�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��K��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 7 ���O�'�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1aim@- Update to aarch64-shenandoah-jdk8u312-b07 (EA) - Update release notes for 8u312-b07. - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2011826�M��N� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��M�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 q �G q �Q��R� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�_��Q�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�P��P� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.eaa� �- Update to aarch64-shenandoah-jdk8u322-b04 (EA) - Update release notes for 8u322-b04. - Require tzdata 2021c as of JDK-8274407. - Switch to EA mode. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Related: rhbz#2022809 / >/ � ��T��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��S� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��V�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��U��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 � 7 � �_��Y�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�M��X� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��W�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 e �r+��V��: � � e D�0 � a2e3eec180d90a42cea830a8b5f0fa6890394a9b51d4349667c8010da5d2d418D�/ � 88ac66f78b2cf64dc6ea2d02f58193bd752cb598be4fa33a9328f2bf4d42de00D�. � aba0487fc98846f969d23ad65f98b2fddc20c5a9ecbd166216fb523452d2cb47D�- � 0768c02eab146e2f88cb0c3f41aee2d4f7b14dbdde274b3955f2155eb21cf944D�, � 322851c3e3042c4bb07d4bb68b94af8a35852bcac51ee3546cab4f53bc08392bD�+ � dda309e14f66aa1f8ced19d835b7e6ff04827b05e42baed38cfbde2ea01b3351D�* � d6029c8033366f8fa025ecb16d28c0d7ebe9ff2aa2c4b0f27fd5af20a22fc2d0D�) � ac4d6d11bf69e5b905738e3547274f544c6780aad810056708d4cdb6ef2f2842D�( � b1e27eaa8378961d1d5aa1cfe6e8b864169425ac61e6881ca154a93ccff6d67aD�' � 8a6cef14e08d6e8b37d66e40c1ac1a7bedf36720f015c5cf16ef968d5bd61eb9D�& � 7315923a129e703d18cf9c04318c3fce2223c31b6b9d9f8742322e1c2bfd100dD�% � 8e64b7d56dda27658b854cd7ae4711c43c6b16b97ee01075b4c86e7bea44f202D�$ � 8468dd2d01e7228ce1d031241b5387d85911912180e2b91324d509c7631724ae Y *hY � ��\��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��[� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��Z� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��^�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��]��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��a� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��`� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��_�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 ) � ) �_��c�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1a�@- Update to aarch64-shenandoah-jdk8u322-b06 (EA) - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of JDK-8275766. - Update tarball generation script to use git following shenandoah-jdk8u's move to github - Resolves: rhbz#2039366�n��b�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 Y *hY � ��f��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��e� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529�Q��d� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529 � p � �,��h�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��g��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��k� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��j� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��i�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � � �Q��m� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529�n��l�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 / >/ � ��o��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��n� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��q�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��p��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��t� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��s� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��r�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n��u�_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 � d � �Q��w� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.eab\@- Update to shenandoah-jdk8u332-b01 (EA) - Update release notes for shenandoah-8u332-b01. - Switch to EA mode. - Related: rhbz#2047529���v�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 / >/ � ��y��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1b]R�- Update to shenandoah-jdk8u332-b09 (GA) - Update release notes for 8u332-b09. - Switch to GA mode for final release. - This tarball is embargoed until 2022-04-19 @ 1pm PT. - Resolves: rhbz#2073422�=��x� �q�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.eab]R�- Update to shenandoah-jdk8u332-b06 (EA) - Update release notes for shenandoah-8u332-b06. - Resolves: rhbz#2047529 � p � �,��{�[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ��z��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��~� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��}� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r��|�g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 d d ��� �1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � p � �,���[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� ����Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r���g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 F ?F �t�� �k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<�� � �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 � p � �,�� �[�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1b�- Update to shenandoah-jdk8u345-b01 (GA) - Update release notes for 8u345-b01. - Resolves: rhbz#2112383� �� ��Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1b��- Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Remove redundant "REPOS" variable from tarball script - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Rebase JDK-8186464 patch so it applies after JDK-8190753 - Resolves: rhbz#2106502 L 7 L �f��� �C�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.eac���- Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191�M��� �Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2cK�@- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Add test to ensure timezones can be translated - Related: rhbz#2133695�r�� �g�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1cIO@- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - * This tarball is embargoed until 2022-10-18 @ 1pm PT. * - Resolves: rhbz#2133695 � � �n���_�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1c�G�- Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges" - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 \ d \ ���� �}�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ead� �- Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1d>�@- Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 � ?F � ���w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695�t���k�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1d�8�- Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�<��� �o�Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ead��@- Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 f f � ����;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ��� w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��!��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��%��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��$��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��#��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��"��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��({�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��'�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��&���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��*��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��)��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��.��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��-��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��,��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��+��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���2{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��1{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��0�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��/���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��4��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��3��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��8��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��7��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��6��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��5��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���<{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��;{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��:�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��9���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ��@��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#��?��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���>���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���=�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��E{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��D��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��C��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��B��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��A��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��I��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���H���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���G�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���F{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��N��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��M��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��L��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��K��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��J��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��S{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��R��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��Q��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���P{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��O{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��W��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��V��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��U��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���T{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��[��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��Z{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��Y��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��X��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 e �r+��V��: � � e D�= � a6859e4664d6b26565182fc6c6f79171ac40e3aabb90299e00efc46e4acf5bc3D�< � 8ef9940c8eab06db4d162a8e62feb96b91bf5674ca74e3d18247cbacdb1fedd1D�; � e63709673c8670886d3e9e2205785adba63f0186853bcf74298fcce168c18f0dD�: � 839aadc2fbe0a7a4b708e39eb1e3e9359bbbad64641fd674e425f561de5d004aD�9 � 0f0fa59eb6e08ac74519d59b709ce746a54f5ac7294b9ef563943eea5bdc327dD�8 � 43ba47c5fe93e659e2128f88d812fbff89a0212d3f97b085a69f6ec65e2a1b2aD�7 � 9b6758993720f8e305448717bc270151ffeedba84a7961f0c5e110065eb6f188D�6 � 17ed16fa6fa0dce15c8b3485e9d01613b70ef05e54ce42b4ead591c57c7f47aaD�5 � d2619ceca8fca7e9ee19cea2143fbd219429e9f9b06409934c366c8d6fb4cefbD�4 � 447af92c743509fb44207fbeccdb5f8b9f35865517ad94009935976e7e5339edD�3 � 07b97f3f2c7b61f7d3f1361ef0cb40ea95320f3213ff8441345dd39ed092edffD�2 � 176be26252edd9349f87c81796fa0c0c19ed3e8dbd43a82b201b7ebab75624edD�1 � f8d118dd0c38e6be586da71c24bb8639d30d388d9b57e276ec52b9ac2f649ead \ XX� \ �[��_��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���^{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��]{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��\��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��c��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��b��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��a��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��`��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��gm�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��f{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��e��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��d{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��k��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���j{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���i{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��h{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��o��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��n{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��m{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��l��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���s{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��r{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��qm�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��p{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��w{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��v��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��u��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���t{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���{{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���z{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��y{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��x{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��~{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��}��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��|��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936��� {�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��"w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��!{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��%{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��${�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��#��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���*{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��){�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��({�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��'��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��&��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��.{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��-��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��,w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��+{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��3{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��2{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��1��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��0��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��/{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��7{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��6{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��5��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���4{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���<{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��;{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��:{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��9��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��8��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��>{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��=m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��A{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��@{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��?��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���F{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��E{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��D{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��C��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��B��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��H{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��Gm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#��L��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��K��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��J{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��I{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��Pm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���O{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��N{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��M{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��Q{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��U��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��T{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��S{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���R{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��Zm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���Y{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��X{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��W{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��V��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��[{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��^m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���]{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���\{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���@ ���E ���I ���N ���S ���W ���[ ���_ ���c ���g ���k ���o ���s ���w ���{ ��� ��� ��� ��� ��� ��� ��� ��� ��� ���" ���% ���* ���. ���3 ���7 ���< �> Á�A ā�F Ł�H Ɓ�L ǁ�P ȁ�Q Ɂ�U ʁ�Z ˁ�[ ́�^ ρ�_ Ё�c с�g ҁ�i Ӂ�m ԁ�p Ձ�t ց�w ׁ�z �~ ف� ځ� ہ� ܁� ݁� ށ� ߁� � ၄ ⁄ い 䁄 偄# 恄% 灄( 聄* 遄/ ꁄ4 끄9 쁄> 큄C G L �Q �T �U �W �[ ���^ ���_ ���a ���e ���h ���j ���n ���r ���t ���x ��| �� �� �� �� �� �� �� e �r+��V��: � � e D�J � 637c8c01ec07ac21fcb709f52f870af6526eaa83bd2915683f8a6f983072e500D�I � da13c76a95a624d2a68550bf3fcf6a40650e79fef0cb040d51e46aa293093fb8D�H � 580eedc42430dabee13298aaafa5f6d0828a7c8ee03e48cc34e248044b273c98D�G � 2f0d2a97bc011f105608fc115346133185d5789361484a950ec00bcc5e36bc70D�F � 1e8d63f3eb80cd678a21631ab2ebcb9b62ce51bba0f293bfe51b327fad1145e2D�E � 34157ccac81b1fd2400592605aa6918ce36609a1d9a3b2cf1b602234d548488dD�D � e912503786155640b2280491e5de73ce270fcfcaf9fc882663359bec6597f790D�C � 385d88da6f3dbafec168b9405c82b40252b4f9d9df0ef1b7328108f1b7de4898D�B � e813e31fc27015fa715af1d13ab9191ba9af31d93085ac2e76e58359305bc66aD�A � 5c04fbcd46e3e025d84e9e8ddf45f002a83926d8117b74d5e0012aa43c934978D�@ � d965d09a6d6db58488fc06f0a1f491c8769c8295f4e6dfaec5bf9e496cc72debD�? � efe004dfc7fcd0160427a7f637f2cab140b7a315eee7143e1894e834e4a70487D�> � c76cdef35908893f12eaa11205c3140dbd9f989ea6e01fd9bc00741c05bdb4c5 � � �;��_{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��c��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��b��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��a�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���`{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���g{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��f{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��e{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��d��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��i{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��hm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��m��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��l��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��k�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���j{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��p{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��o{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��n��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��t��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��s��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��r�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���q{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��w{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��v{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��u��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��z}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��y��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��x��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��~��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��}��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��|�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���{{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>�� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4����c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&�� ��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&�� {�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4����c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��#{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���"{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��!��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��%��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��${�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���(}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��'}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��&��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��*��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��){�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��/y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��.��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��-�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���,{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��+��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � K�Lt � ��4��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��3s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��2�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��1y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��0�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��9y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��8��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��7�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���6w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��5w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��>��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��=s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��<�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��;y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��:�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Cs�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��B�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ay�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���@w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��?w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Gw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Fw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ew�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��D��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��L�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ky�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Jw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Iw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Hi��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��Qw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Pw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ow�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��N��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ms�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��Tw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Sw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Ri��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���Uw�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��W��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��V��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��[��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��Z��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��Y��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��X��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��^{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��]�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��\���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 e �r+��V��: � � e D�W � 6afa89d1f93f0c18b712d80864bb7c05453680e7c2ef4267277d1a05fc5f3ed5D�V � 91265a7a7ea601e581e1e9d0927369baa2509184619fcbfe483ba909db979caaD�U � 7b73f05a3cad8a9e27146ed66584c90db157d3c8dd9073156714b06d53ae16b4D�T � 569c3afb20ee7aa02a316df5870c65b53bb314376059e9e761ab3e81622b3891D�S � 245bfc9c157989c74777ef47e429b5b2823da6b25f940cc71fd0fae7aa230185D�R � 5effb3b9f9c3b2e58564ce52ef1e7d855cc8030a6d8903d0d257eb9a2f166a73D�Q � 708f19a2413ea0ae0ab9a7619a05c06675c69004d477b56b71ac6ec988ee1cc4D�P � c1a1ba3ae8f745008a0b7e5c0e4663241db1a386d16bd54eef846e125686cebaD�O � 02f897ee795a6592d97ca15c780cbdd6ca2bc2a793d53ef279ad3f01f27d472cD�N � f72a7e95336d9380f37c46d2de0b736c876a15b4c1e7dbb4c351ca2552bbc411D�M � 6eb48672224acb21d0dbc83835af74ba98ee85d8e9d3991623af2bc0d57d6761D�L � 47f52ae65081a918aa822fb28261dafe5b707b012d7f07714f3beff7a4d49f45D�K � d7d58e3708a957c3e2d7c60c347de4ffa8baf7169446426889d9fd0618af02c9 g g ���_w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��a��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��`��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��e��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��d��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��c��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��b��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��h{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��g�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��f���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��j��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��i��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��n��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��m��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��l��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��k��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���r{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��q{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��p�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��o���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��t��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��s��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��x��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��w��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��v��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��u��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���|{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��z�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��y���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � �� ��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���~���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���}�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082������Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� �� ��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]����5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[�� ��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��#��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��"��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��!��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��'m�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��&{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��%��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��${�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��+��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���*{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���){�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��({�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��/��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��.{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��-{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��,��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���3{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��2{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��1m�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��0{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��7{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��6��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��5��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���4{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���;{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���:{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��9{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��8{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��?{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��>{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��=��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��<��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��C{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��B{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��A��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��@w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��G��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��F��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���E{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���D{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��K��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Jw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��I{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��H{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���N{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���M{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��L{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��R{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��Q{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��P��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��O��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��V{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��U{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��T��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Sw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��Z��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��Y��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���X{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���W{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��^��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��]w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��\{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��[{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��bw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��a{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��`{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��_{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 e �r+��V��: � � e D�d � bbfa941de4ca08de5ac2912c49346b26f8b10f79c9dedcc1c73b7593d728b8d9D�c � 5732a4798be4c87badb456e95d85a69fdcc47d79f536cdf10bf8bfe8ac5353abD�b � f97f8b49e1c67b65e3bc3821a5542f91cff1d9241f858a36d041fae368a1f2fcD�a � 08b94d6efe931c32344ea97bafacefaf26b7ab57c499ee718b7466ba31c94321D�` � a5344af6f4e55dc3241835e173e61da3faccff81e74b16a504ca025d31166199D�_ � 82943aa98d57823fabd6521b0364b533551b4f5b299febc13bc41d5342b5583cD�^ � 2d39e047ddef688bbc3b526d384126a7602bf927866cbbd6d9306cf24221253dD�] � 0781ec76d6ef76f218a16289f31a21e27af4064a2fa1f213a49828a67e50c669D�\ � d434ab93e69642120974f37b28bf06b2fc55a8b51e2bb5b62b339413bcc1b605D�[ � 6bba16931590ee051b717e6cc7eaf6319e483746bab088b484dada27e5f230d5D�Z � 4660a5a7faa79cea2990c384533fca3da9b3ac6afdf6f55b36b2cad51352c3e0D�Y � 70b5a86232c1ba2b2535285ea1e7951e1c2ce4779402d9ef8b14a9e2574922c4D�X � 386d6eeb6ec186c7d3ac868781a062f7659e7f29629bf7919767ced443ced16e � �� � � ��e{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��d{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��c��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���j{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��i{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��h{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��g��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��f��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��n{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��m��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��lw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��k{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��s{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��r{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��q��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��p��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��o{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��w{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��v{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��u��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���t{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���|{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��z{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��y��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��x��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��~{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��}m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$�� m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��#��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��"��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��!�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���'{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��&{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��%{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��$��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��){�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��(m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��-��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��,��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��+�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���*{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��0{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��/{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��.��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��4��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��3��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��2�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���1{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��7{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��6{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��5��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��:}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��9��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��8��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 bR oRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��# ��' ��+ ��/ ��3 ��7 ��; ��? ��C ��G ��K ��N ��R ��V ��Z ��^ ��b ��e ��j ��n ��s ��w ��| !��~ "�� #�� $�� %�� &�� '�� (�� )�� *�� +�� ,�� -��# .��' /��) 0��- 1��0 2��4 3��7 4��: 6��> 7��A 8��D 9��H :��J ;��M <��P =��S >��V ?��Y @��[ A��^ B��` C��c E��e F��h G��j H��o I��t J��y K��~ L�� M�� N�� O�� P�� Q�� R�� S�� T�� U�� V��! W��% X��( Y��* Z��. [��2 \��4 ]��8 ^��< _��@ `��E a��I b��N c��S d��W e��[ f��_ g��c h��g j��k k��o l��s m��w n��{ � � W � �4��>��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��=��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��<�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���;{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��A{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��@{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��?��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��D}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��C��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��B��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��H{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��G��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��F��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��E��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��J��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��I{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���M}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��L}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��K��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��P��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��O��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��N{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��S{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��R{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��Q��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��V}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��U��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��T��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��Y{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��X{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���W}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��[��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��Z{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���^}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��]}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��\��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��`��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��_{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��c{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���b{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��a��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 e �r+��V��: � � e D�q � 5b9c35a49f05bdae1d6d9ae13688adb2f1aa9eed15604ea80e3126af3ad89c77D�p � 1a762e2d8882a0c051d0a322eb97ba3c2fbdb843e16699bb702cecd284f238faD�o � 905c6cb39018d44fe1113513cbf517b142fbc537206ae23c0ce00c299f5e39a4D�n � 7f18b428cb0449058380cba27d10eac85a6389b6c3393ef6454032f2dda04023D�m � 6b0ef069c7763a3ba0b61d3804a6919fa06467de6088cbbcda7c568dfc3309b0D�l � 62730a490f70fb743015316019c09c1992ef54947750f054eaaf08ff9a387163D�k � e3e0d812a13816d47ae085d4f88c2d0f4d8affad6568434ab0f720442981017bD�j � d81b0c0ebf60fb1b4d6ccb36f93b9d93064cf246ecff7f7c16b2ddbb61c57c91D�i � 0a5287477758b2371bd5090dfacaf9dd93c3f1cc379245204f8a143593599b48D�h � f24dce379d6c501f95ff094a43c786cc4932cecf9af4ed5ad162b4159d5a2007D�g � 645b31999a5a9633d017660dd3029d098a23145a02bcc776967acb3d0414464cD�f � e2febf7854a5223cbd8ac5101e3cb5cc8a2a9ac22a6ed7712ad25b139199fee2D�e � 33f79495a144745f0bf779634202c2e16ec9ce1d545d08ada1d51ff124397d75 * U* �&��e��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��d{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���h}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��g}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��f��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��j��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��i{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��oy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��n��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��m�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���l{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��k��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � K�Lt � ��t��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��ss�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��r�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��qy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��p�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��yy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��x��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��w�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���vw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��uw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��~��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��}s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��|�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��{y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��z�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665��� w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��w� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }�� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z�� y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&�� w�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]�� w�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��i��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��w� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S�� s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��w�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��w�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��i��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ����;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ��� w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��!��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��%��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��$��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��#��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��"��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��({�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��'�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��&���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��*��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��)��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��.��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��-��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��,��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��+��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���2{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��1{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��0�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��/���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��4��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��3��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��8��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��7��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��6��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��5��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���<{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��;{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��:�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��9���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ��@��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#��?��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���>���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���=�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��E{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��D��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��C��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��B��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��A��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��I��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���H���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���G�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���F{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��N��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��M��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��L��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��K��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��J��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��S{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��R��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��Q��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���P{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��O{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��W��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��V��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��U��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���T{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��[��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��Z{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��Y��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��X��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��_��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���^{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��]{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��\��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��c��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��b��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��a��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��`��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��gm�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��f{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��e��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��d{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 e �r+��V��: � � e D�~ � f81e7c1a0f24f7ca56cedc1938c0e1bba78c74ad082589529118fe1d795d6748D�} � 5f692d98607238270b572db3bdedd64d8b9eb468b0cc08cead1d6b23aae63718D�| � 7f5933636add693e7d9a57c9d29615c25c2163009b4d680b43a93c0f252fc3c4D�{ � d91a5237171093f889f2e37c55c5cbf4f02728ff2fb050c08f0547c1c7cf5f63D�z � 3e729bea301dda80bd7dad924182af1a8859d3473da42b7cb9ed78adebef8963D�y � 1b9fbe198a3af7e79bb697022c8043d39441c77daf5446b0e0b8e7f5c18603c8D�x � 5a64f67b760664231aa056ce36899a472656f882e163cec3ee2c913fe4b34140D�w � b1355c30321cdcfe6f3fc6298e8e7995196ed2edc8127aa23cee6fb0def56d65D�v � 5dc4485c972bd78d1637297056bbcc819f90e800c1681f449d5ab226d2b8772bD�u � b620f989048c7f2f276ae3cbc4a5217f51cff7aad191e75030d927f8022e7c5aD�t � 8b57170fd0541d89c862ecea52f823ede947a5b16983a9646cf0c6e4970996b4D�s � fed7b567e393c86119acb36d69b38b769bcb51e24ddcf415141d81230fdc54a8D�r � f87df491c22e76385180845739c13ba05724afcded006f1e0f2114ff956460e9 ? W:� ? �W��k��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���j{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���i{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��h{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��o��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��n{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��m{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��l��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���s{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��r{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��qm�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��p{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��w{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��v��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��u��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���t{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���{{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���z{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��y{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��x{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��~{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��}��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��|��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936��� {�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��"w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��!{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��%{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��${�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��#��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���*{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��){�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��({�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��'��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��&��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��.{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��-��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��,w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��+{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��3{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��2{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��1��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��0��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��/{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��7{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��6{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��5��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���4{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���<{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��;{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��:{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��9��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��8��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��>{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��=m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��A{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��@{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��?��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���F{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��E{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��D{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��C��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��B��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��H{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��Gm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#��L��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��K��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��J{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��I{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��Pm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���O{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��N{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��M{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��Q{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��U��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��T{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��S{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���R{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��Zm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���Y{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��X{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��W{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��V��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��[{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��^m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���]{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���\{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��_{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��c��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��b��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��a�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���`{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���g{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��f{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��e{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��d��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 e �r+��V��: � � e D� � 89818b9dde137228b185c849e8eec7f90bed6867be5b294a8b8121f52776af6aD� � f2a450757e610e9d7a49050e04cab12edad074ddca95fd92a67972bd61fcbabaD� � 0f4b94a13ab49a4fb2ac8ff3106cdaa6e83e43757720457189e685e7a55ed6d6D� � 970a62a2a5e145cc2c8fa7e55e770b427abb4943c6d8e85bb81c928a192bb407D� � 22d64046fb95580843be1a65bdeaa8f2a9beca7721f0af5f20f9263a59cc2977D� � c76bb943b6a1a6711f5c6301f55730c1b173e983e6b7b095c9d0135c7b6a52f0D� � 5dfcf8baeded2f96a2597b878a1006d7eb03d4d61927a000e1528dd9008b0671D� � d47daec1adb6903ec50993bb856136c6ca6c1d28610a211a0082c8b683162941D� � bce793675eea8330ee5714f685ee6bf75de56dd9f106dbbe3149d9fa9d144416D� � acb345f09856db7783a06a30026e252117dbee4274e86ea5b3c2959410f22b01D� � a71605698db58a372ff02ab6d78041cca4507c94f4bdc16507ec30994e53892fD� � fdcabd5524523efc4fa2f438cdb2f40de42b6606b73bbff9e8f65e21ea81f437D� � 0e30ee127b67a51aaff1ffe3ae0cb616b808bc21850fe2f23be2b229a8bb8853 W �;��i{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��hm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��m��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��l��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��k�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���j{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��p{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��o{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��n��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��t��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��s��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��r�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���q{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��w{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��v{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��u��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��z}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��y��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��x��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��~��cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��}��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��|�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���{{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>�� {�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4����cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&�� ��GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&�� {�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4����cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ p�� q�� r�� s�� t�� u�� v�� w�� x��" y��% z��* {��. |��3 }��7 ~��< ��> ���A ���F ���H ���L ���P ���Q ���U ���Z ���[ ���^ ���_ ���c ���g ���i ���m ���p ���t ���w ���z ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���# ���% ���( ���* ���/ ���4 ���9 ���> ���C ���G ���L ���Q ���T ���U ���W ���[ ���^ ���_ ���a ���e ���h ���j ���n ���r ���t ���x ���| ��� ��� ��� ��� � Á� ā� Ł� Ɓ�# ǁ�' ȁ�+ Ɂ�/ ʁ�3 ˁ�7 ́�; ́�? �C ρ�G Ё�K с�N ҁ�R Ӂ�V ԁ�Z ] �_ ] �}��}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&����GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��#{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���"{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��!��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��%��GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��${�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���(}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��'}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��&��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��*��WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��){�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��/yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��.�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��-�#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���,{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��+��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � K�Lt � ��4�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��3s�5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��2�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��1yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��0�cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��9yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��8�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��7�#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���6w�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��5w�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��>�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��=s�5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��<�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��;yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��:�cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Cs�5Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��B�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��AyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���@w�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��?w�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Gw� Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Fw�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ew�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��D�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��L�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ky Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Jw�WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Iw�ESeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Hi�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��Qw� Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Pw�? Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ow�! Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��N� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ms�5 Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��Tw�W Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Sw�E Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Ri� Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���Uw�3 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��W��; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��V��Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��[��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��Z��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��Y��y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��X��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��^{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��]�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��\�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���_w�3 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��a��; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��`��Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��e��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��d��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��c��y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��b��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��h{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��g�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��f�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 e �r+��V��: � � e D� � 0f91ee82a0f353071438675ca34ab961c867b90d20e8e45c2472604fdc1165ecD� � d5fa6533d980b7889d1404f6dda42ce2de80411d4079bd78b7ce3257cb36e5deD� � d24b5e95b20420b1e37b28037c9bd5175c6fbfd17e6a78347fb26b2792a126efD� � 237858b698163e9a4615ec1ab98636d66cd7e26deb3512708bd88164019a1994D� � 2e548be4d940969b8feee6cc4ffb8dde5ac295e684713eba0f96b20f287e7b40D� � cd2e66ab8554e43fed6cf3a6fe7067b925de6a4ebe0acd82af46e341ce011229D� � 5ec49c65245b5b4768c2ac475d313f22f92daa8114cbfc555c7189d5844f7b24D� � f1402f59f4309e9a2ad497a9699c098b61381170de7f600a6a7636db589400d5D� � 155a01df2abb9e5b0463d2bbe0314d3147245d1540cc0e5026de16abc670d0e6D� � 19cc17be5a8b2b11edcbc35b6648252c7d5913d500ab82bda2d44c47f0d3f440D� � 0b25bab3a8a0341d22387d3674f6676645e3d3d497d2de92de115a56fa012b1bD� � 33ead8c29c4da7be1c35398bea14adbd1069eb04196df8a75ddffab71562e778D� � 0de12d2701881f7f8bd093302babcb112ad65af4943bd2e0d2bcb2884f12012d f f � ��j��; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��i��Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��n��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��m��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��l��y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��k��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���r{�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��q{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��p�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��o�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��t��; Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��s��Q Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��x��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��w��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��v��y Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��u��7 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���|{�1 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��z�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��y�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � �� ��}Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���~��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���}�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082�����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� �� ��}Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[����1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]����5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^����7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[�� ��1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811��� {�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{�� {�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��#��5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��"��7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��!��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#�� ��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��'m�SJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��&{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��%��5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��${�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��+��)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���*{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���){�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��({�OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��/��5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��.{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��-{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��,��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���3{�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��2{�OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��1m�SJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��0{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��7{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��6��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��5��)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���4{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���;{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���:{�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��9{�OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��8{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��?{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��>{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��=��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��<��)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��C{�OSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��B{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��A��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��@w� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��G��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��F��)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���E{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���D{�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��K��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Jw� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��I{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��H{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���N{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���M{�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��L{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��R{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��Q{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��P��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��O��)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��V{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��U{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��T��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Sw� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��Z��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��Y��)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���X{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���W{�7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��^��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��]w� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��\{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��[{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��bw� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��a{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��`{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��_{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��e{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��d{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��c��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���j{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��i{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��h{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��g��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��f��'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 e �r+��V��: � � e D�% � 97eec08dd36b082c41af38fa508339931bbf380795208dfcf82213afc0e5486dD�$ � cb236ed8e588d128b8cdc78afdce6379dcd39b817725c547e7f06734476accd8D�# � dff37a0add22b38eab5365de428508592ec00dc762e1cb45853495efb7c80c04D�" � 764c4140bd73b1c0bdc434edd88f8c15595f4b1c04c426277e3e1b098ebe7d16D�! � 64083e41574124b62214c724c95ecf69227a63f84cb8ea3c1b91c9e46909d214D� � 95793f42b845d0ea4f32a235ac9b117b776a44e3f656a26633a3012f93a31bfeD� � f95f722b442bc9d91784e68a17b61860bc39197eaa93b49c63ee4572dd5a1007D� � 46649389b1065af3dd7807f1fef23cb1e6f50351ea151d97424e8b8a75c616f3D� � 8bebe621091a0ae4cea699aab647472b02128fdedc6cd35f7a87166bd62ed233D� � 4c39d29f58affbbc0dca6ea29bd2dd9b75658d24d46f216c7de17b46f021b13eD� � 3038e1befe3903f7b2bfb4fb5ed1ee07a0ba36db33ae2aae4ba05e4040d2b65fD� � 1619875cba8598818f4bb31d4ba22a7d88804cab9b8ed1e66cb4cf18b1b446cbD� � ecd28bfd8a7f97d111587dec88746bdc8143ed9ea22a73f2c05141e5361dc7c2 [� �{��n{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��m��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��lw� Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��k{�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��s{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��r{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��q��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��p��'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��o{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��w{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��v{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��u��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���t{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���|{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��z{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��y��AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��x��'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��~{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��}m�]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��{�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#�� ��A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� �� {�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V����' Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{ Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��{�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$�� m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510��� {� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422��� {�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;�� {�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��#��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��"��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��!�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373��� {�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���'{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��&{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��%{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��$��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��){�} Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��(m�] Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��-��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��,��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��+�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���*{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��0{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��/{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��.��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��4��c Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��3��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��2�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���1{�5 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��7{�S Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��6{� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��5��9 Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��:}� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��9��] Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��8��G Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��>��c!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��=��]!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��<�� !Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���;{�5!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��A{�S!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��@{�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��?��9!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��D}�!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��C��]!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��B��G!Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��H{�"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��G��9"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��F��c"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��E��]"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��J��G"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��I{�S"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���M}�"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��L}�"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��K��]"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��P��c#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��O��]#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��N{�E"Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��S{�S#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��R{�#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��Q��9#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��V}�#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��U��]#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��T��G#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��Y{�$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��X{�E#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���W}�#Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��[��G$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��Z{�S$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���^}�$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��]}�$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��\��]$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��`��W$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��_{�E$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��c{�%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���b{�$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��a��A$Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��e��G%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��d{�S%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���h}�%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��g}�%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��f��]%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 bR <RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ց�b ׁ�e �j ځ�n ہ�s ܁�w ݁�| ށ�~ ߁� � ။ ⁋ か 䁋 偋 恋 灋 聋 運 ꁋ# 끋' 쁋) 큋- 0 4 �7 �: �> �A �D ���H ���J ���M ���P ���S ���V ���Y ���[ ���^ ���` ���c ��e ��h ��j ��o ��t ��y ��~ �� �� �� �� �� �� �� �� �� �� ��! ��% ��( ��* ��. ��2 ��4 ��8 ��< ��@ ��E ��I ��N ��S !��W "��[ #��_ $��c %��g &��k '��o )��s *��w +��{ ,�� -�� .�� /�� 0�� 1�� 2�� 3�� 4�� 5��" 6��% 7��* 8��. 9��3 :��7 ;��< i � i �.��j��W%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��i{�E%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��oy&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��n�&Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��m�#&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���l{�%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��k��A%Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 e �r+��V��: � � e D�2 � e61584e7d9905cb45027e741b94c7b54f6b883091b652d2e13a682d244a0d9c9D�1 � f3c1504a0f9e8be3e261212092e89009d8b01f3fe0f1804ed10e767846e87d26D�0 � 49275f52aa1c71edc688e6802a1f2c8b136594807077f4aa90e4e2686edd8ddbD�/ � 4c86c1c3d77ede8a23e4eef1b4c3e4de9e50b799ed8dc0e6a6091ff032631cf6D�. � 2b98912d64d86fdfe8af76dc95ea23e41332536c8e0ef98223e9a33f2d227f22D�- � c77e3e9c9f9cc48a40bb188838bad833e1ea361ee0ba3424abed546f3945d701D�, � e78824bc6d2ccd3f5942b851ce6c3323367ca0cfa615dc8c95158aee19c123feD�+ � d1a6eb397fc04c57428b2ed1f9e3077ed639a5877ef02b2312725fb99c17c807D�* � 30c32ac3292a24f2136302bf5bf2d8ebf572bc2b8c57b4cb3c50ffeb223e144eD�) � eb01e604d2abe850e31d2092b9db3c5b0df3ee2c53ee80d31ea248c0962ea297D�( � 9b0f357ea1eeba57c0d266260414871735cb04729cc62e43ab7bc3503538cb95D�' � bce31a77615b379250e7eba11be12018aecf44bf33cd3d92aba684b157074907D�& � 56ec7e50303f9b981bec76c83f17fd6d6eaafaf4b44ba798d7dd4592b9c6663d � K�Lt � ��t�&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��ss�5&Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��r�{&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��qy&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��p�c&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��yy'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��x�'Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��w�#'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���vw�?&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��uw�!&Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��~�'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��}s�5'Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��|�{'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��{y'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��z�c'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��s�5(Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}���{(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��y(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665��� w�?'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!'Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��w� (Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���w�?(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665���(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }�� �{)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z�� y)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&�� w�W(Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]�� w�E(Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��i�(Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��w� )Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���w�?)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665���)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S�� s�5)Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��w�W)Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��w�E)Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��i�)Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���w�3*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ����;*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q*Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{�� {�}*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� *Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ��*Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ��� w�3+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��!��;+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��Q+Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��%��A+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��$��A+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��#��y+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��"��7+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��({�}+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��'�� +Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��&��+Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��*��;,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��)��Q,Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��.��A,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��-��A,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��,��y,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��+��7,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���2{�1,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��1{�},Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��0�� ,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��/��,Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��4��;-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��3��Q-Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��8��A-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��7��A-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��6��y-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��5��7-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���<{�1-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��;{�}-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��:�� -Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��9��-Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ��@��}.Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#��?��A.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���>��.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���=�� .Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��E{�}.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��D��A.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��C��A.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��B��A.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��A��A.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��I��A/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���H��/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���G�� /Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���F{�5.Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��N��A/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��M��A/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��L��A/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��K��A/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��J��}/Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��S{�}0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��R��A0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��Q��A0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���P{�5/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��O{�}/Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��W��A0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��V��A0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��U��10Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���T{�50Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��[��A1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��Z{�}0Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��Y��50Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��X��70Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��_��11Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���^{�51Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��]{�}1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��\��A1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��c��51Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��b��71Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��a��A1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��`��A1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��gm�S2Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��f{�}2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��e��52Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��d{�}1Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��k��)2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���j{�;2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���i{�72Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��h{�O2Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��o��53Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��n{�G2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��m{�}2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��l��A2Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 e �r+��V��: � � e D�? � 9c713d3f8c2da0e96f093a322cd54bca18ff323dd824b4a6cfa730232160f754D�> � e450e9d5bc1c7f5f5f4f8b5d7ce575e0a5756a4bab5ed98be38ec59c1ffb0276D�= � 529b379f29069f8d8015829e0ce51b950cdfd5764b3d2de634462f2f45957b29D�< � 7086a3c094b4e91c8ec76f30de930c4f4c0d0eb7f9617e94c419d74aabb4f793D�; � e9370bcf27554400437736d6d3c4091baa10166592baf0f0a1912084c024255dD�: � 499aafdde42137b651f07de95acdb9b2b0426c0923756ba0bb98c74731260debD�9 � 694a1661be3ee29b44619821670f2826998a9100cefc0efc36d04db24b211e47D�8 � 1f2763028ec3d49595e594f3c26e4361b3462c3391db1c8dbebdb12aeb792896D�7 � efa7cbf450462d4d95389173c50afbb6786eb202258fbc8ba90ef57e2459561aD�6 � 4521dde116f75afbb70beca46c5f369e56507e92501cb8051a6caf5aebe62defD�5 � 87e7e547e429b8f05895e13d2852cf0bb18f91a4aba2a1bddc445c950284fc3aD�4 � 54bf6ecd682245bc83076c67fa21c5c7db62c883a50972dc40dbfeda8a121125D�3 � 18a12adf2bee6b8b9f5f9ed18be2ae1759d9d9d3aaeac59fd9a62973cfd8e759 � \� � ���s{�73Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��r{�O3Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��qm�S3Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��p{�}3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��w{�}3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��v��A3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��u��)3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���t{�;3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���{{�;4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���z{�74Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��y{�O4Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��x{�G3Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��{�G4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��~{�}4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��}��A4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��|��)4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��{�O5Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��{�}4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]4Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� 4Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����A5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�75Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� 5Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���{�;6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936��� {�76Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{�� {�}5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��{�G6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#����A6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��{�A6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]6Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� 6Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����A7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�77Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� 7Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��"w� 8Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��!{�G8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� �� {�A7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}7Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��%{�A8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��${�}8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��#��]8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���*{�8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��){�]8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��({�{8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��'��A8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��&��'8Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��.{�}9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��-��]9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��,w� 9Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��+{�G9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��3{�]9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��2{�{9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��1��A9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��0��'9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��/{�A9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��7{�A:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��6{�}:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��5��]:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���4{�9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���<{�:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��;{�]:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��:{�{:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��9��A:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��8��':Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��>{�}:Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��=m�]:Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��A{�A;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��@{�};Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��?��];Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���F{�;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��E{�];Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��D{�{;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��C��A;Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��B��';Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��H{�};Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��Gm�];Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#��L��A<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��K��'<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��J{�A<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��I{�}<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��Pm�]<Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���O{�<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��N{�]<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��M{�{<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��Q{�}<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��U��'=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��T{�A=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��S{�}=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���R{�5<Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��Zm�]=Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���Y{�=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��X{�]=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��W{�{=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��V��A=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��[{�}=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��^m�]>Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���]{�>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���\{�5=Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��_{�}>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��c��c>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��b��]>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��a�� >Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���`{�5>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���g{�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��f{�S>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��e{�>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��d��9>Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��i{�}?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��hm�]?Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��m��c?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��l��]?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��k�� ?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���j{�5?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��p{�S?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��o{�?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��n��9?Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 e �r+��V��: � � e D�L � 115dde7a103bd42e620ddd732d36ef609984603c7103f803f2d1d8bac1bef6c9D�K � 28d98e71d3a3f5bef8abd07f0acc8353279545bf2aee26db49d58baded52104eD�J � 4c5528d38245aa14b33d05948eb02c322e95528485c9970733d2e5a577774d6dD�I � 1699532891581ac8f26d0ec07605ccb1d294d5a52f3b72ac2d996d064199d55eD�H � 3391ca1aa9dc6a5e4ed248a618ad059946ec5c65625f2566cbe9773d60646f54D�G � 08f9a253bf2654c7f281ec675c59f7bd4bd0f06ed499e82831fcd79aef82e50bD�F � 4a40dbfa3e0e5c2e7457bda18c82a1c0d3f49f91b8d548c568fea520908bec6bD�E � 58fb7f4dacffd07cdbe657ec86f4af0d40760828a968dd894a92ea0fc7028255D�D � 0cb275f3f74903e0b995fb60bd6d2d45b6d75c0f10a329bf957ff43cddf17096D�C � 28a98571198ec6a28a437669678c624aad4fa1d5a6a2dd1bfb4884dddc584a5cD�B � 0688bc15522e5a3eee9f6ec2d771f77743a5979f6ac5afa0ec5059daa5926e35D�A � bb040f65e782eb45f2e750692dccebe3a40db82890f2982e835b5946fb8a3a13D�@ � feeaaecf67702b0e5815ef109a94fbdbbce95e0e6228db0f8c286f9f61a845dd � � W � �4��t��c@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��s��]@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��r�� @Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���q{�5@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��w{�S@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��v{�@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��u��9@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��z}�@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��y��]@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��x��G@Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��~��cAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��}��]AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��|�� AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���{{�5AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��{�SAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>�� {�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}�AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]AAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����GAAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��{�BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4����cBAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&�� ��GBAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&�� {�SBAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }�BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }�BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]BAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4����cCAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��{�EBAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��{�SCAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��{�CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}�CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����GCAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��{�DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��{�ECAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}�CAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&����GDAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��{�SDAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }�DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }�DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��WDAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�EDAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��#{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���"{�DAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��!��ADAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��%��GEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��${�SEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���(}�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��'}�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��&��]EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��*��WEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��){�EEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��/yFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��.�FSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��-�#FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���,{�EAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��+��AEAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � K�Lt � ��4�FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��3s�5FJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��2�{FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��1yFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��0�cFAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��9yGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��8�GSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��7�#GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���6w�?FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��5w�!FAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��>�GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��=s�5GJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��<�{GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��;yGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��:�cGAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Cs�5HJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��B�{HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��AyHAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���@w�?GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��?w�!GAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Gw� HSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Fw�?HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ew�!HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��D�HAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��L�{IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��KyIAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Jw�WHAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Iw�EHSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Hi�HJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ =��A >��F ?��H @��L A��P B��Q C��U D��Z E��[ F��^ G��_ H��c I��g J��i K��m L��p N��t O��w P��z Q��~ R�� S�� T�� U�� V�� W�� X�� Y�� Z�� [�� \�� ]�� ^��# _��% `��( a��* b��/ c��4 d��9 e��> f��C g��G h��L j��Q k��T l��U m��W n��[ o��^ p��_ q��a r��e s��h t��j u��n v��r x��t y��x z��| {�� |�� }�� ~�� �� ��� ��� ��� ���# ���' ���+ ���/ ���3 ���7 ���; ���? ���C ���G ���K ���N ���R ���V ���Z ���^ ���b ���e ���j ���n ���s ���w ���| ���~ ��� ��� ��� ��� ��� ��� ��� ' (�U � ' � ��Qw� ISeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Pw�?IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ow�!IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��N�IAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ms�5IJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��Tw�WIAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Sw�EISeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Ri�IJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���Uw�3JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��W��;JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��V��QJAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��[��AJAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��Z��AJAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��Y��yJAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��X��7JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��^{�}JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��]�� JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��\��JAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���_w�3KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��a��;KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��`��QKAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��e��AKAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��d��AKAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��c��yKAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��b��7KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��h{�}KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��g�� KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��f��KAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��j��;LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��i��QLAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��n��ALAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��m��ALAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��l��yLAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��k��7LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���r{�1LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��q{�}LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��p�� LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��o��LAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 e �r+��V��: � � e D�Y � 62bf471ba14072212be41f68548e536d8a022b8fffa4c7fdf94b4dc26c4d7d3aD�X � cb1e709d6fc4d17df3ff827f54f59d30c0e4cb11b30652b60e0f1087d387bdd9D�W � b5bacd96f28f126743bbc0807bcb665ff0c52ee4b0256b7bcffb9a10f8d18c68D�V � 7bfed40726a8044b0f0685487bd9f5131499f3c91242720ec1c55565601abd18D�U � c441b3fe43905a4ba494377fd18f7afb8d59b3c95abfb93384cd0577b3568a5cD�T � 2117399e425ef95fb4a8b8d38c39a38d73b5e0ad8f8212f6e467901f5f05ca9cD�S � 31f1aea6422bc6b0072f7c26fc3200a90ac929108eee513f7452415171c8a9bdD�R � ceb4699a86911fa2a032df43313a18847098f66921adb5fab1298f3791d1b144D�Q � 4c7a4b1402ce62b471994dd364f3e883167ad5ba8ebba01d67f8ceee2f63d6a5D�P � d17d23e9f3e2cd89c98f84ba07345a6c51f1dc3d67f5d52d483e6f2ed2d93751D�O � f63528cfd40b5a5fb0d1e92cd4b91403bab6d49b9bd38ad0aef9e293a98a4b2aD�N � e1b83152038966e7b6a720ab0871b052fb0dc4df9c843243ac9f34f68ff8a58fD�M � 74c5d742dbaa75738c5c52f77416c65b88472bdd5eafe0c39fe63d1816522476 f f � ��t��;MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��s��QMAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��x��AMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��w��AMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��v��yMAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��u��7MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���|{�1MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{{�}MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��z�� MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��y��MAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � �� ��}NJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���~��NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���}�� NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��{�}NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����ANAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#�� ��AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082�����OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���{�5NAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#����AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#�� ��AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#�� ��AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#�� ��AOAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� �� ��}OJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��{�}PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����APAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����APAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���{�5OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��{�}OAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#����APAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#����APAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[����1PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���{�5PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#����AQAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��{�}PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]����5PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^����7PAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[�� ��1QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811��� {�5QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{�� {�}QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��AQAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��#��5QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��"��7QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��!��AQAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#�� ��AQAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��'m�SRJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��&{�}RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��%��5RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��${�}QAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��+��)RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���*{�;RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���){�7RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��({�ORSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��/��5SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��.{�GRAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��-{�}RAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��,��ARAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���3{�7SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��2{�OSSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��1m�SSJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��0{�}SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��7{�}SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��6��ASAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��5��)SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���4{�;SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���;{�;TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���:{�7TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��9{�OTSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��8{�GSAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��?{�GTAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��>{�}TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��=��ATAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��<��)TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��C{�OUSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��B{�}TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��A��]TAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��@w� TJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��G��AUAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��F��)UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���E{�;UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���D{�7UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��K��]UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Jw� UJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��I{�GUAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��H{�}UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���N{�;VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���M{�7VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��L{�}UAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��R{�GVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��Q{�}VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��P��AVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��O��)VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��V{�AVAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��U{�}VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��T��]VAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Sw� VJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��Z��AWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��Y��)WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���X{�;WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���W{�7WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��^��]WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��]w� WJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��\{�GWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��[{�}WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��bw� XJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��a{�GXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��`{�AWAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��_{�}WAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��e{�AXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��d{�}XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��c��]XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���j{�XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��i{�]XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��h{�{XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��g��AXAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��f��'XAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��n{�}YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��m��]YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��lw� YJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��k{�GYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��s{�]YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��r{�{YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��q��AYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��p��'YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��o{�AYAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��w{�AZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��v{�}ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��u��]ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���t{�YAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 e �r+��V��: � � e D�f � c6835fc2dc5e5741781c97f0dd76cd871e82a83dded531a6ca44d9a58abd9a2aD�e � 9c6296e27d68895aa9814be130a3a7bb16cd8fa2ec14d63699d1a6a1223dc662D�d � e12fcfca359b3c38140cf59ead8a267ef1c024a4ed16d4250b7d14c94300a665D�c � 04ec871279754a00e7006a2f023b95ed305dc36a9ff23d65ed20cbf987b07ffdD�b � b9cbd1c4954833f2a8f3d68b1cc92407f3df064e044f0f7f335563bf1983963bD�a � f6fbb6525d675cb023750b0e38502f6e9d30cb7ce70f98d75a7bc6a76d175598D�` � 8e0d749ba5b5f6a9925903f7cb854321aba39a3bc393c295fbbff22c33feb07cD�_ � 7f699df3b1a5a03f46da8dc559615cdabf4c01094c12f89d7bbbbb93f3744af6D�^ � 8244566af4a36c890bd6abe69ab5f9fd27a7847a32c6063c2ec5fb6de40b84feD�] � a1c2e9d4603673b1df8482afca3dab078eea9124690469ef6dee7f9d4e663b29D�\ � e9036e2b707bcda2cefdab377479ae65cfc1d4f0da25dc54312d9786b65eb947D�[ � a11deef2840f7fe80ce1b946609ec3aa04069da0557383edb2dd88107312e356D�Z � 8127547ec74cf787276b994c2f00085304d697481622d6712560f5c1fde57dd1 D %}~ � D ���|{�ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{{�]ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��z{�{ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��y��AZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��x��'ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��~{�}ZAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��}m�]ZJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��{�A[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����][Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{�[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�][Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}[Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�][Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#�� ��A\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� �� {�A\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��m�]\Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{�\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��{�}\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V����']Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���{�5\Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��m�]]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{�]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��{�}]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$�� m�]^Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510��� {�^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422��� {�5]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;�� {�}^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��#��c^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��"��]^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��!�� ^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373��� {�5^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���'{�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��&{�S^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��%{�^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��$��9^Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��){�}_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��(m�]_Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��-��c_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��,��]_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��+�� _Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���*{�5_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��0{�S_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��/{�_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��.��9_Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��4��c`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��3��]`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��2�� `Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���1{�5`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��7{�S`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��6{�`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��5��9`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��:}�`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��9��]`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��8��G`Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��>��caAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��=��]aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��<�� aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���;{�5aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��A{�SaAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��@{�aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��?��9aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��D}�aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��C��]aAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��B��GaAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��H{�bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��G��9bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��F��cbAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��E��]bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��J��GbAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��I{�SbAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���M}�bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��L}�bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��K��]bAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��P��ccAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��O��]cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��N{�EbAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��S{�ScAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��R{�cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��Q��9cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��V}�cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��U��]cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��T��GcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��Y{�dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��X{�EcAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���W}�cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��[��GdAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��Z{�SdAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���^}�dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��]}�dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��\��]dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��`��WdAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��_{�EdAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��c{�eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���b{�dAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��a��AdAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��e��GeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��d{�SeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���h}�eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��g}�eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��f��]eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��j��WeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��i{�EeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��oyfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��n�fSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��m�#fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���l{�eAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��k��AeAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � K�Lt � ��t�fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��ss�5fJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��r�{fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��qyfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��p�cfAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��yygAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��x�gSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��w�#gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���vw�?fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��uw�!fAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 e �r+��V��: � � e D�s � b2ab719c45f136d393fa35fa34b5f7ce41406fba2c86e188fc3d3823aabe7688D�r � 1cbeca0135b7f2bc07c9bcd75fc0fe3f09797e00adfb9350ced9cd89eeb77a8eD�q � b346f29da69c21241a449decf0f47b1117502c6f136b70a23a24f1438e919766D�p � 2596d8e58b7977e350ac45b39a8c22507bf5f23a48e5c5af3025b81016622b58D�o � a7cb9faf1648281d26c03a5952b9c015a6e302f5018328fa99f1cd9aafbf89c4D�n � 935642d829064a30780cd84c8e1ca654486d06cc675f9a06e246d6b366d333c5D�m � 58b23e3f8226650315902eba6ab9e2d2a81f816aa85d12cebf74af56a8504c16D�l � 7efe56d9bcad9ff6dc145a50baf931d2125888da4d984a84fd14a509862f3751D�k � 4851da54ebe84600b0c7af372a59c38094992018f2ffe45bec040b2dd5d380bdD�j � db00d954c05dbf5ebc5e47f7671980d64911b459229bc83c8dcd6c60c4ce0b90D�i � d23dd2eb44577c74053a9b0d2df44d8fb4618ffcdc560bc60003b1393107baf1D�h � b2017332dfd84aebbbfe8b857c333da3eb192f27956aa48ab410bc0ea011ca72D�g � d297c29388bc4f582e226fb85070d6108bb21fb17acb88d7d2de900bfcc84423 � K�Lt � ��~�gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��}s�5gJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��|�{gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��{ygAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��z�cgAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��s�5hJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}���{hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��yhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665��� w�?gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!gAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��w� hSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���w�?hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665���hAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }�� �{iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z�� yiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&�� w�WhAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]�� w�EhSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��i�hJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��w� iSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���w�?iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665���iAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S�� s�5iJiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��w�WiAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��w�EiSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��i�iJiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���w�3jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ����;jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����QjAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����AjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����yjAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{�� {�}jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ��jAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ��� w�3kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��!��;kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��QkAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��� ��� ��� ���# ���' ���) ���- ���0 ���4 ���7 ���: ���> ���A ���D ���H ���J ���M ���P ���S ���V ���Y ���[ ���^ ���` ���c ���e ���h ���j ���o ���t �y ā�~ Ł� Ɓ� ǁ� ȁ� Ɂ� ʁ� ˁ� ́� ́� � ρ�! с�% ҁ�( Ӂ�* ԁ�. Ձ�2 ց�4 ׁ�8 �< ف�@ ځ�E ہ�I ܁�N ݁�S ށ�W ߁�[ �_ ၑc ⁑g けk 䁑o 偑s 恑w 灑{ 遑 ꁒ 끒 쁒 큒 � � �" �% �* ���. ���3 ���7 ���< ���> ���A ���F ���H ���L ���P ���Q ��U ��Z ��[ ��^ ��_ ��c ��g ��i ��m � �q � �#��%��AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��$��AkAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��#��ykAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��"��7kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��({�}kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��'�� kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��&��kAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��*��;lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��)��QlAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��.��AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��-��AlAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��,��ylAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��+��7lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���2{�1lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��1{�}lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��0�� lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��/��lAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��4��;mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��3��QmAndrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��8��AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��7��AmAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��6��ymAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��5��7mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���<{�1mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��;{�}mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��:�� mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��9��mAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ��@��}nJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#��?��AnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���>��nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���=�� nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��E{�}nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��D��AnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��C��AnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��B��AnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��A��AnAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��I��AoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���H��oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���G�� oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���F{�5nAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��N��AoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��M��AoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��L��AoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��K��AoAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��J��}oJayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��S{�}pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��R��ApAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��Q��ApAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���P{�5oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��O{�}oAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��W��ApAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��V��ApAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��U��1pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���T{�5pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��[��AqAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��Z{�}pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��Y��5pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��X��7pAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��_��1qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���^{�5qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��]{�}qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��\��AqAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��c��5qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��b��7qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��a��AqAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��`��AqAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��gm�SrJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��f{�}rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��e��5rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��d{�}qAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��k��)rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���j{�;rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���i{�7rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��h{�OrSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��o��5sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��n{�GrAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��m{�}rAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��l��ArAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���s{�7sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��r{�OsSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��qm�SsJiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��p{�}sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��w{�}sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��v��AsAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��u��)sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���t{�;sAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���{{�;tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���z{�7tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��y{�OtSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��x{�GsAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 e �r+��V��: � � e D� � 503b6775fa6993e20617e140090892909b171ba5cb9cf102f14e12e8e3722fbfD� � 993ebb29f0261ce55c92629ffd652f5fd4b867dbb41765fad94a00716ec5e8b1D�~ � 3bf5af40702f37c01b474763465e7acba66d1f9cca53e59538aa92a72f018a35D�} � 208f92bb62fd7e69ec6decb3b63b18a2c7e51d8c1ea83099de63b56163c9d1d2D�| � 25f4706211e06a217d7143f0aead6ea49f2a47344d314396d09e691a83a51848D�{ � 7d5c7ed2663b8b4d93ccdce3e87fa7b84c42697397d9594170591871b706c60dD�z � 5ef7809b46025089f784a5c5eef97c5cb1c0ae4576bd7a05f04c657f2231d054D�y � 14d75975f6b77789e102a09b3e0c65a16a5cd38e795fdb34c4f40cf970a67b93D�x � f1896e8ffe63eff76d82b6ef313c62631fce45258dee3c4ac0e2ffe4b8e841e6D�w � b82ab048b9697892096528f61737d1713449b0dfdae049f4533ac7d1e469ad0eD�v � 83d5e8fcf034f22af47eccbbd1c693274a94cfc7afdec007e5cebcb5d3ed2a73D�u � 25ac1048044afca67ce7c131d644b1fbf4661666b58a9bf482f289e5b1905c0fD�t � 12a2e4e010484b9e7bd30fc89af801f0e1e212a2faaaa5017acde6e83cd52964 W �� � W � ��{�GtAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��~{�}tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��}��AtAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��|��)tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��{�OuSeverin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��{�}tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]tAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� tJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����AuAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�7uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� uJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�GuAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���{�;vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936��� {�7vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{�� {�}uAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��{�GvAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#����AvAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��{�AvAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]vAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� vJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����AwAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�7wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� wJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�GwAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��"w� xJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��!{�GxAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� �� {�AwAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}wAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��%{�AxAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��${�}xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��#��]xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���*{�xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��){�]xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��({�{xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��'��AxAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��&��'xAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��.{�}yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��-��]yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��,w� yJiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��+{�GyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��3{�]yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��2{�{yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��1��AyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��0��'yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��/{�AyAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��7{�AzAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��6{�}zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��5��]zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���4{�yAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���<{�zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��;{�]zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��:{�{zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��9��AzAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��8��'zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��>{�}zAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��=m�]zJiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��A{�A{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��@{�}{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��?��]{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���F{�{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��E{�]{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��D{�{{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��C��A{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��B��'{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��H{�}{Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��Gm�]{Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#��L��A|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��K��'|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��J{�A|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��I{�}|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��Pm�]|Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���O{�|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��N{�]|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��M{�{|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��Q{�}|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��U��'}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��T{�A}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��S{�}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���R{�5|Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��Zm�]}Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���Y{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��X{�]}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��W{�{}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��V��A}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��[{�}}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��^m�]~Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���]{�~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���\{�5}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��_{�}~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��c��c~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��b��]~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��a�� ~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���`{�5~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���g{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��f{�S~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��e{�~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��d��9~Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��i{�}Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��hm�]Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��m��cAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��l��]Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��k�� Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���j{�5Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��p{�SAndrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��o{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��n��9Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��t��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��s��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��r�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���q{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��w{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��v{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��u��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��z}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��y��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��x��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 e �r+��V��: � � e D� � 03861872c0b045970aa5d709fc96b48dc78114b5fe454d59dff316eb4753ec08D� � fed1a25dff437173e5198969384d287e1c91872362d72445cda5bf8bc78201f5D� � 0bec8227df4692ec640eaf96154a87faa5a1ab3d9c37856f4f8e0c0a98c88525D� � 8c2a340bb8e3487639e7851ddf9b80b263ca137dee7948eceddfd372f4b80882D� � 6f89875815ef474fc2dd49d33fb56f30d070a424491a2ab970b04c4b3a36133eD� � 8b27ff2d6ae464c9929368b71564984ac614007abaed4abfb490c301cdd341deD� � c43cc5c86cdd41a4e686f3173df2eca34068dc56d75a5a468786fc13989bd5fdD� � d5660d632b89221fe127f4475df5c34071486cde5540e458836be4a6b5ab6bcdD� � 0dfc6e8ea7cfb111b83da1e6ce7bfc3f5f3c353f61b25a21812ba01aed81cbedD� � 981af71f35ff127f9a818e70105e8d4597de1eae244d22caa97ea246a29deee1D� � 0a8fa0a8748dd4667a74653e840521e8d0602e1f9210bb2b27d75c59318081c0D� � dc7ff660e8cb322dcf0a071b2f556dfa57cc7a3c0a543524ae2c9b6a807d8262D� � 248b6271c4100aa6ae97c9a74a7d3b0bf217ed7e074e51ff84d4eb50183ea9a5 � � W � �4��~��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��}��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��|�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���{{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>�� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4����c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&�� ��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&�� {�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4����c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��#{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���"{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��!��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��%��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��${�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���(}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��'}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��&��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��*��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��){�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��/y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��.��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��-�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���,{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��+��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � K�Lt � ��4��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��3s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��2�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��1y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��0�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��9y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��8��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��7�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���6w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��5w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��>��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��=s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��<�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��;y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��:�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Cs�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��B�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ay�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���@w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��?w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Gw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Fw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ew�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��D��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��L�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ky�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Jw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Iw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Hi��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��Qw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Pw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ow�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��N��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ms�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��Tw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Sw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Ri��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���Uw�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��W��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��V��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��[��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��Z��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��Y��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��X��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��^{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��]�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��\���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ���_w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��a��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��`��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��e��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��d��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��c��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��b��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��h{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��g�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��f���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��j��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��i��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��n��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��m��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��l��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��k��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���r{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��q{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��p�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��o���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��t��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��s��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��x��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��w��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��v��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��u��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���|{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��{{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��z�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��y���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 bR pRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��t ��w ��z ��~ �� �� �� �� �� �� �� �� �� �� �� �� ��# ��% ��( ��* ��/ ��4 !��9 "��> #��C $��G %��L &��Q '��T (��U )��W *��[ +��^ ,��_ -��a .��e /��h 0��j 1��n 2��r 3��t 4��x 5��| 8�� 9�� :�� ;�� <�� =�� >�� ?�� @��# A��' B��+ C��/ D��3 E��7 F��; G��? H��C I��G J��K K��N L��R M��V N��Z O��^ P��b Q��e R��j S��n T��s U��w V��| W��~ Y�� Z�� [�� \�� ]�� ^�� _�� `�� a�� b�� c�� d��# e��' f��) g��- h��0 i��4 j��7 k��: l��> m��A n��D o��H e �r+��V��: � � e D� � 39b2ee3cdead3a8fa94b2f7fb082014e56dc28992ac2740a46795004ac7dd6c0D� � 7541eb5333c72fe17aa8e0d7dc2f7f91d8769a57129608043af2b098b5741661D� � 20e9c59ba021cc9600dbade71b83e1e1b014eae44d6ba273d5fa6491d9508f08D� � e3d2e4fe4672614c07f199cf8ea78ca12ec2e4c5bfee735cbffb6dca84ba91cdD� � e2d9e1fc46982332f4c50e35b6e51f62edc6bd78156642b63e2553d404909efaD� � 47005db64df1a2026edd49418e5714bd0cc4b55a22af61ad08162f38d849be23D� � a2a0890a1bee535a6e50b46532778911b437fe971d72e228048964d8dd0f7550D� � 8b331529abc56930e532f91b8634eaa719301817f62a7a7fbbc720594baf85daD� � 6e91279c2c56161f7ffdfd5a8f8f361d282238b249859e57ac7e8d4b04a799e7D� � c55fbad2b511346ebf2a848c75861a87c98b38738226ac74429144324281ef52D� � f544bc64d6a690d2e5853b042cb5a8c7eb50879dacd1acf3c3eca69966d25370D� � 0cb228d7dc8544ea720f5503724f929baf79d69d2a7d1eb9dd47cf361620788eD� � be2825be40e44e47e533b1d6e13b3145e41e073086a22147b77532548436e30d + ��9 + � �� ��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���~���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���}�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082������Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527����� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� �� ��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[����1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]����5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[�� ��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 � X�� � �]��#��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��"��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��!��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��'m�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��&{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��%��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��${�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��+��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���*{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���){�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��({�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��/��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��.{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��-{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��,��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���3{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��2{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��1m�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��0{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��7{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��6��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��5��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���4{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���;{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���:{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��9{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��8{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��?{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��>{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��=��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��<��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��C{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��B{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��A��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��@w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��G��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��F��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���E{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���D{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��K��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Jw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��I{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��H{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���N{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���M{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{��L{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��R{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��Q{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��P��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��O��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��V{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��U{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��T��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��Sw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#��Z��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��Y��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���X{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���W{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q��^��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��]w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��\{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��[{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��bw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��a{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� ��`{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��_{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��e{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��d{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��c��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���j{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��i{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��h{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��g��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��f��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��n{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��m��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��lw� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��k{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��s{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��r{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��q��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��p��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��o{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��w{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��v{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��u��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���t{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���|{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��z{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��y��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��x��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��~{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��}m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 e �r+��V��: � � e D�' � 5c5cbbb79d474d8a08d41a7a9eab16454a6204f748c42ff97d2ca8776ea1fbc8D�& � f251e57808a6960518cf05f98f4bed5c0b006b5a01550a68ebb9141c79f0a2ddD�% � 2095e4e98eb5962eb97eb3c3165dd036bf0cc42fbb1cfd2c138811047868000fD�$ � f1844144d5a3c42025f3ef1788373858de7187d6dd96e9bcddac4b3fd027e5c9D�# � 8477e56cf835d806a8f5345ebff218dfbceb351c7bca81b9aa806a2fa8930f02D�" � ce32d3269966c385c52153f1c95ee8578b768a8b69a1d2937f50ab40dc45e380D�! � a051479c689a04906459e0f87104834ea707b2ffeb1317695704b03edb4c8b2bD� � 47a66548a049d52ad8e7adcde0de98e6768596cb771d5b8ee590193dda421dd4D� � 4b6626a337fe2141755d1e57f9afb5d1914f4b0d752fac9cb28cea90640d95d3D� � e76b18f34fbbf2a1e7810ed95efd446420bc4ee561f16434445b97b5a0d466c4D� � 2b55d4f35dce819b798ee136c0dfb0c453985cfd824a8e839552fa2112ae4123D� � 649c2ee77e6ebe7b0ada06b4afab6acc21bb572fecb9b419d681640d40847bf0D� � 6cd18c7d7a47f7f1e42e63865172f463162be9c7697c5e7b1953c41099a4d25d � �� � � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#�� ��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V�� ��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z�� {�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V����'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$�� m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510��� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��#��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��"��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��!�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373��� {�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���'{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��&{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��%{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��$��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��){�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��(m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��-��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��,��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��+�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���*{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��0{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��/{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��.��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��4��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��3��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��2�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���1{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��7{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��6{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��5��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��:}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��9��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��8��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��>��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��=��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��<�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���;{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��A{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��@{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��?��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��D}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��C��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��B��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 * J��* �>��H{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��G��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4��F��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��E��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&��J��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��I{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���M}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��L}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��K��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4��P��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��O��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��N{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��S{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��R{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��Q��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��V}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��U��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��T��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��Y{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��X{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���W}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&��[��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��Z{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���^}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��]}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��\��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��`��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��_{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��c{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���b{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��a��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��e��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��d{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���h}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��g}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��f��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��j��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��i{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��oy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��n��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��m�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���l{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��k��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � K�Lt � ��t��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��ss�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��r�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��qy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��p�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��yy�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��x��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��w�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���vw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��uw�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��~��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��}s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��|�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��{y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��z�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}���{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665��� w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 e �r+��V��: � � e D�4 � bf23abfbb52f27d2a18450e2bbc48bb65f02cee123b849b8e4fb9c07a0e91259D�3 � 7a01c8e4b4c1eaaf03f29bc31b1fe91b81c17591f2d6a358c7e57ae3b8103eb6D�2 � c0938d8860cf5e93761458738a21c3f5f505e71d1669169693c88f8471d51381D�1 � 8319e904c4b86f6892579492778456a31dcdbb29d4f7b62060dba26486be2a85D�0 � 8f21403b3615c8a3c67833bcb49d11b4c3b80d768a6bdba42abe5d2b299d9cb3D�/ � b22aa8999bea98b78e5fb8b2195a94bb82daa9f6c9469ec768b019d741e439dbD�. � 9592f2b746e7ef4c2e4fd13ac3fad913504fb720911df981e24b63bf2011a6e6D�- � 01b83fa31f2e2ed972aa491423479df2e3e026e54668e3933d3b8b1803fe208bD�, � 50a577d62eed91a0ed5c686f85830b3c9252dff331c94841f673d8f19924250dD�+ � 2cee495ddd05e0808ca1e516d0b1ad02fcdf3e46ede1dadb81a285b96ab3648cD�* � 393806557640081ee6c9dd7dc6ee00e307d9ae676a1a267d20fb4793dda538d7D�) � ba6f42672b28ba6a322e4daf6a3e3fc791a39cdd7e438b6d6954713e77022fa6D�( � b9b371aa85a094ef9bf89ccec7f948b0f98488eac855ba41f5653f61941610e4 � }-� � � ��w� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }�� �{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z�� y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&�� w�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]�� w�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��i��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��w� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665����Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S�� s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 { &{ �&��w�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��w�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��i��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 g g ���w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ����;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p����Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?����y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ����7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I�� �� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K�� ���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 g g ��� w�3�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5_�@- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64) - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java - Resolves: rhbz#1901695 f f � ��!��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p�� ��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��%��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��$��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��#��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��"��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 b 0bb �{��({�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��'�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��&���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��*��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��)��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��.��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��-��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��,��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��+��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���2{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��1{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��0�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��/���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 f f � ��4��;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�@- Add new Harfbuzz library to package listing and _privatelibs - Resolves: rhbz#1903907�p��3��Q�Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea_�- Update to jdk-11.0.10.0+1 - Update release notes to 11.0.10.0+1 - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly. - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags. - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version. - Cleanup debug package descriptions and version number placement. - Switch to EA mode for 11.0.10 pre-release builds. - Drop JDK-8222286 & JDK-8254177 as applied upstream - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle) - Resolves: rhbz#1903907 � �q � �#��8��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.4-0.0.ea_��- Update to jdk-11.0.10.0+4 - Update release notes to 11.0.10.0+4 - Resolves: rhbz#1903907�#��7��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.3-0.0.ea_��A- Update to jdk-11.0.10.0+3 - Update release notes to 11.0.10.0+3 - Resolves: rhbz#1903907�?��6��y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_��@- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b - Resolves: rhbz#1903907� ��5��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea_�=�- Update to jdk-11.0.10.0+2 - Update release notes to 11.0.10.0+2 - Update tarball generation script to use PR3818 which handles JDK-8171279 changes - Drop JDK-8250861 as applied upstream. - Resolves: rhbz#1903907 � 0bb � ���<{�1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-1`>(�- Add backport of JDK-8258836 to fix -Xcheck:jni warnings - Resolves: rhbz#1897602�{��;{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0`��- Update to jdk-11.0.10.0+9 - Update release notes to 11.0.10.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-01-19 @ 1pm PT. - Resolves: rhbz#1908970�I��:�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea` 2A- Update to jdk-11.0.10.0+8 - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04. - Resolves: rhbz#1903907�K��9���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea` 2@- Update to jdk-11.0.10.0+5 - Update release notes to 11.0.10.0+5 - Drop JDK-8222527 as applied upstream. - Resolves: rhbz#1903907 + ��9 + � ��@��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082�#��?��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���>���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���=�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527 ` X�` ` �{��E{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��D��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��C��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��B��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��A��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082 � dXE � �#��I��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.3-0.0.ea`_ A- Update to jdk-11.0.11.0+3 - Update release notes to 11.0.11.0+3 - Resolves: rhbz#1938082���H���Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`_ @- Debug builds need to find their documentation from the release build. - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs. - Resolves: rhbz#1930527���G�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea`\{@- Perform static library build on a separate source tree with bundled image libraries - Make static library build optional - Based on initial work by Severin Gehwolf - Resolves: rhbz#1930527���F{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 R �J� � R �#��N��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��M��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�#��L��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.5-0.0.ea`lM@- Update to jdk-11.0.11.0+5 - Update release notes to 11.0.11.0+5 - Resolves: rhbz#1938082�#��K��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.4-0.0.ea`a�A- Update to jdk-11.0.11.0+4 - Update release notes to 11.0.11.0+4 - Resolves: rhbz#1938082� ��J��}�Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea`a�@- Fix issue where CheckVendor.java test erroneously passes when it should fail. - Add proper quoting so '&' is not treated as a special character by the shell. - Resolves: rhbz#1938082 d� �{��S{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��R��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082�#��Q��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082���P{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��O{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228 � d\ � �#��W��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��V��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811�[��U��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���T{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736 � ;; � �#��[��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.6-0.0.ea`pA�- Update to jdk-11.0.11.0+6 - Update release notes to 11.0.11.0+6 - Resolves: rhbz#1938082�{��Z{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��Y��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��X��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811 \ XX� \ �[��_��1�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea`ٹ�- Update to jdk-11.0.12.0+1 - Update release notes to 11.0.12.0+1 - Switch to EA mode for 11.0.12 pre-release builds. - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed) - Remove local JDK-8187450 backport as now included upstream. - Resolves: rhbz#1967811���^{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-1`u��- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736 - Resolves: rhbz#1937736�{��]{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0`t6@- Update to jdk-11.0.11.0+9 - Update release notes to 11.0.11.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2021-04-20 @ 1pm PT. - Resolves: rhbz#1940228�#��\��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.7-0.0.ea`r�- Update to jdk-11.0.11.0+7 - Update release notes to 11.0.11.0+7 - Resolves: rhbz#1938082 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ q��M r��P s��S t��V u��Y v��[ w��^ x��` y��c z��e {��h |��j }��o ~��t ��y ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���% ���( ���* ���. ���2 ���4 ���8 ���< ���@ ���E ���I ���N ���S ���W ���[ ���_ ���c ���g ���k ���o ���s ���w ���{ ��� ��� ��� ��� ��� ��� ��� ��� ��� ���" ���% ���* ���. ���3 ���7 ���< ���> ���A ���F ���H ���L ���P ���Q ���U ���Z ���[ ���^ ���_ �c Á�g ā�i Ł�m Ɓ�p ǁ�t ȁ�w Ɂ�z ʁ�~ ˁ� ́� � ρ� Ё� с� ҁ� Ӂ� ԁ� Ձ� ց� � X�� � �]��c��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�^��b��7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea`��- Update to jdk-11.0.12.0+4 - Update release notes to 11.0.12.0+4 - Correct bug ID JDK-8264846 to intended ID of JDK-8264848 - Resolves: rhbz#1967811�#��a��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.3-0.0.ea`��@- Update to jdk-11.0.12.0+3 - Update release notes to 11.0.12.0+3 - Resolves: rhbz#1967811�#��`��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.2-0.0.ea`��- Update to jdk-11.0.12.0+2 - Update release notes to 11.0.12.0+2 - Resolves: rhbz#1967811 z z � ��gm�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��f{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395�]��e��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811�{��d{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ? W:� ? �W��k��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���j{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���i{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��h{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873 � XX� � �]��o��5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea`��- Update to jdk-11.0.12.0+6 - Update release notes to 11.0.12.0+6 - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change - Resolves: rhbz#1967811� ��n{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��m{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��l��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936 � \� � ���s{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��r{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��qm�S�Jiri Vanek <jvanek@redhat.com> - 1:11.0.12.0.7-1a0��- Minor cosmetic improvements to make spec more comparable between variants - Related: rhbz#1999936�{��p{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0`�@- Update to jdk-11.0.12.0+7 - Update release notes to 11.0.12.0+7 - Switch to GA mode for final release. - This tarball is embargoed until 2021-07-20 @ 1pm PT. - Resolves: rhbz#1972395 ] a] ] �{��w{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��v��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��u��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���t{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936 � [�� � ���{{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���z{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�$��y{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873� ��x{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 W �� � W � ��{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��~{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#��}��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W��|��)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � �$��{�O�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.12.0.7-2aZ�- Don't package lib/client and lib/client/classes.jsa which don't exist. - Resolves: rhbz#1698873�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 e �r+��V��: � � e D�A � 6f4bf52463b1c528e35abf3e53489d86f0214da06151240744c0ab18b50ab903D�@ � e1f96091d25298a2ba6942bf99057752361acd85a35af09192241146d47a7a08D�? � 48de10d35c7c78cda02151a71c35178d70d58dce2c1dc876ddabcacf02451fd3D�> � d042e5b60af5791405d9b06cced6de982519177eed1cee3e7edb8c9002315ac6D�= � 724f57980c52e692722c8586a68fbb7ecfc81812bf1d923a920abbdb04014943D�< � 40085a6aba324cf85849d9d215ea0210e30299d2952b61e18b07e9bbd0256068D�; � 9dc6103c894580255acdaca6f10c631843d1f93573f2546118ae35826f597314D�: � 2128f5867b50e91bf6e0f43a02f4d16b03085189d8040f386c115ab75f5a842bD�9 � 2ebb08ac7cb76c373713ca2bd23cc2232982bc402088afaa3c55fff250bb8869D�8 � 33d81cf734e717eea6795c7c41a630b5e0eecbab4514f5859db6609e50ef0447D�7 � 6b0e694fe0bd25769497d03ebe96ad15e93d707736bcee6eb8e89bae4d0f77c1D�6 � e0d5c3c3503d52c16cbaa1ee54130af69d4b939561a49a2a1591e2049fd69279D�5 � 740cebdde7c6823d4f1beee23080215f1f12ef9577011c88461d3bf597d1931a @ �D � @ �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 D �D ���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936��� {�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 W �� � W � ��{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332�#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936 1� � � ��{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810 @ �D � @ �#����A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.7-0.1.eaaex�- Update to jdk-11.0.13.0+7 - Update release notes to 11.0.13.0+7 - Resolves: rhbz#1999936�W����)�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.eaad'@- Update to jdk-11.0.13.0+1 - Update release notes to 11.0.13.0+1 - Update tarball generation script to use git following OpenJDK 11u's move to github - Switch to EA mode for 11.0.13 pre-release builds. - Remove non-Free test from source tarball. - Related: rhbz#1999936���{�;�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-4ab�- Reduce disk footprint by removing build artifacts by default. - Related: rhbz#1999936���{�7�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3ab�- Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build - Related: rhbz#1999936 [� �q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J�� w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� �� {�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�A- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332�{��{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Update to jdk-11.0.12.0+8 - Update release notes to 11.0.12.0+8 - Switch to GA mode for final release. - This tarball is embargoed until 2021-10-19 @ 1pm PT. - Resolves: rhbz#2012332 � ^� � �J��"w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��!{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332� �� {�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{�� {�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 � �� � � ��%{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��${�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��#��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���*{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��){�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��({�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��'��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��&��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 [� �{��.{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��-��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810�J��,w� �Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.eaa�c�- Replaced hardcoded 11 by featurever where appropriate - Fixed comment of `for slowdebug` to correct `any debug` - Related: rhbz#2022810� ��+{�G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1af�@- Revert addition of libharfbuzz.so after its removal by JDK-8255790 - Resolves: rhbz#2012332 , ^�� � , �+��3{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��2{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��1��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��0��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��/{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805 ^ v ^ � ��7{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��6{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��5��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810���4{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422 D %}~ � D ���<{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��;{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��:{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��9��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��8��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��>{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��=m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � �� � � ��A{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��@{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366�q��?��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.eaa�e�- Update to jdk-11.0.14.0+8 - Update release notes to 11.0.14.0+8 - Switch to EA mode for 11.0.14 pre-release builds. - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. - Rename blacklisted.certs to blocked.certs following JDK-8253866 - Resolves: rhbz#2022810 D %}~ � D ���F{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��E{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��D{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��C��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��B��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531 W �;��H{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��Gm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � ^� � �#��L��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531�V��K��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��J{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��I{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366 Q� �$��Pm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���O{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��N{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��M{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422 � � �;��Q{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 g ��B g �V��U��'�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.eabUi�- Update to jdk-11.0.15.0+1 - Update release notes to 11.0.15.0+1 - Switch to EA mode for 11.0.15 pre-release builds. - Related: rhbz#2047531� ��T{�A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1bO�- Update to jdk-11.0.14.1+1 - Update release notes to 11.0.14.1+1 - Resolves: rhbz#2052805�{��S{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1a�Z@- Update to jdk-11.0.14.0+9 - Update release notes to 11.0.14.0+9 - Switch to GA mode for final release. - This tarball is embargoed until 2022-01-18 @ 1pm PT. - Resolves: rhbz#2039366���R{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 v XY� v �$��Zm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���Y{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�+��X{�]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bY^@- Remove security items from release notes that were only in 17u and N/A for 11u - Related: rhbz#2073422�z��W{�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1bV�@- Update to jdk-11.0.15.0+9 - Update release notes to 11.0.15.0+9 - Switch to GA mode for release - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. ** - Resolves: rhbz#2073422�#��V��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.8-0.1.eabUi�- Update to jdk-11.0.15.0+8 - Update release notes to 11.0.15.0+8 - Resolves: rhbz#2047531 � � �;��[{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � �Z� �$��^m�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510���]{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422���\{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � � �;��_{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510 � � W � �4��c��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��b��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��a�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���`{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 d \� � d ���g{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2bZ��- Add JDK-8284920 fix for XPath regression - Related: rhbz#2073422�&��f{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��e{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��d��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 W �;��i{�}�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1bҨ@- Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8284920 patch now upstreamed - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use "git apply" with patches in the tarball script to allow binary diffs - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 - Make use of the vendor version string to store our version & release rather than an upstream release date - Explicitly require crypto-policies during build and runtime for system security properties - Resolves: rhbz#2106510�$��hm�]�Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1b�@- Add additional patch during tarball generation to align tests with ECC changes - Related: rhbz#2106510 � � W � �4��m��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��l��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��k�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���j{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��p{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��o{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��n��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 � � W � �4��t��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��s��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��r�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���q{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��w{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��v{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ��u��9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��z}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��y��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&��x��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 � � W � �4��~��c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1��}��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�R��|�� �Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac6@- Update to jdk-11.0.17+1 - Update release notes to 11.0.17+1 - Switch to EA mode for 11.0.17 pre-release builds. - Related: rhbz#2130373���{{�5�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1c�- Update to jdk-11.0.16.1+1 - Update release notes to 11.0.16.1+1 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Resolves: rhbz#2119512 � \� � �&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>�� {��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 e �r+��V��: � � e D�N � da6113b8e3f60613882eeec8c8497c068bd46559042351e5cf030ec9ad382d41D�M � d6beb9da905c4b24c2f8e52152046e20369cddd4a1f98e7babf6ac1658ced21bD�L � ac4c10593aace7feb58b42351306016a0668d518b590587b3be6a1fabb94aabfD�K � 1aed659e1e3bce0de9d3874074bcf4fc4df05a8018e054fdb5ac7209dd8ffad7D�J � e95162c5ce19bdda8897921e19c340bcc15ab18c2627b6d8915c79b8754c1505D�I � e601bbdfd361d5089be7cec55d69d6cc4b85d1c52963c2f8d004de14bd0ccde1D�H � 1ede1f94ef149ac05c9b87696792135237e12c4f7eb09ed33fcb232bee567817D�G � ec4e31145b2bd5c37f07b12786ef3f1a7f747d2b7545a8f2deb7ca4a1dee6692D�F � 374186860ba10d433ef1b2fc521d6b97c48570d7340740cbe2e83f73df0b05e4D�E � be203dd4714182fcfeef395bb57d7d5e9f418c603b87d6a5eb1ddb4db5253163D�D � 2141ba5b56fde898fffe70f5ebc0e8dd7ef3958b68e0cb81881c570fbfc2a0f2D�C � 8c2b3aa763d6d464e67be783b62d083cadc0aa9caf7fd24997ebcb514c44a4b2D�B � b322d84f1b35af3ca899bf943ee67782b8ae449a4769e0b3d0b7f455085b669c * J��* �>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373�4����c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373 * U* �&�� ��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&�� {�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 - � � - �4����c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< A- Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5 - Related: rhbz#2130373�1����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.eac< @- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again - Related: rhbz#2130373�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � \� � �&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695�>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695� ����9�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.7-0.1.eac=q�- Update to jdk-11.0.17+7 - Update release notes to 11.0.17+7 - Resolves: rhbz#2130373 ] �_ ] �}��}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q����]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192�&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 M t M �>��{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695�_��{�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182���}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 * U* �&����G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��{�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ��� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}�� }��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q�� ��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.�� ��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_�� {�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 � XT� �>��#{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1cF�@- Update to jdk-11.0.17+8 (GA) - Update release notes to 11.0.17+8 - Switch to GA mode for release - Resolves: rhbz#2133695���"{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��!��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 * U* �&��%��G�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.eac� @- Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192�&��${�S�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2cJ��- Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz - Related: rhbz#2133695 � �� � ���(}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-2c�G�- Add missing release note for JDK-8295687 - Resolves: rhbz#2160111�}��'}��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1c���- Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192�q��&��]�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.eac��- Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 i � i �.��*��W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ead��- Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106�_��){�E�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1d9@@- Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 r XT � r z��/y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��.��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��-�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���,{��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1d���- Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106�#��+��A�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.7-0.1.ead�D@- Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 � K�Lt � ��4��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��3s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��2�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��1y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��0�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 / �< � / z��9y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.7-0.0.ea_��B- Update to jdk-11.0.9+7 (EA) - Resolves: rhbz#1876665� ��8��Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.6-0.1.ea_��A- Update static-libs packaging to new layout - Resolves: rhbz#1876665�P��7�#�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea_��@- Update to jdk-11.0.9+6 (EA) - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334 - Resolves: rhbz#1876665���6w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��5w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � K�Lt � ��>��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��=s�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��F- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��<�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��E- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��;y�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��D- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�0��:�c�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea_��C- Update to jdk-11.0.9+8 (EA) - Remove JDK-8252258/RH1868406 now applied upstream. - Resolves: rhbz#1876665 : �� : �S��Cs�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665}��B�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ay�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665���@w�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��?w�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665 � }-� � � ��Gw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Fw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ew�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��D��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665 | &{ � | }��L�{�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.0.ea_��A- Update to jdk-11.0.9+10 (EA) - Resolves: rhbz#1876665z��Ky�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.9-0.0.ea_��@- Update to jdk-11.0.9+9 (EA) - Resolves: rhbz#1876665�&��Jw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Iw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Hi��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 ' (�U � ' � ��Qw� �Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_��- Fix directory ownership of static-libs package - Resolves: rhbz#1896610���Pw�?�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Delay tzdata 2020b dependency until tzdata update has shipped. - Resolves: rhbz#1876665�K��Ow�!�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0_�9�- Update to jdk-11.0.9+11 - Update release notes for 11.0.9 release. - Add backport of JDK-8254177 to update to tzdata 2020b - Require tzdata 2020b due to resource changes in JDK-8254177 - This tarball is embargoed until 2020-10-20 @ 1pm PT. - Resolves: rhbz#1876665��N��Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.10-0.1.ea_�9�- Improve quoting of vendor name - Resolves: rhbz#1876665�S��Ms�5�Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea_��B- Set vendor property and vendor URLs - Made URLs to be preconfigured by OS - Moved vendor_version_string to a better place - Resolves: rhbz#1876665 b &{ b �$��Vq�Y�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R��@- Fix vlock doesn't perform PAM account management or credential reinitialization Resolves: #1032140l��Uqk�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock Resolves: #1026819�&��Tw�W�Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2_�#�- Add backport of JDk-8222537 so the Host header is sent when using proxies. - Resolves: rhbz#1869530�]��Sw�E�Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1_���- Update to jdk-11.0.9.1+1 - RPM version stays at 11.0.9.11 so as to not break upgrade path. - Adds a single patch for JDK-8250861. - Resolves: rhbz#1895275�s��Ri��Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1_���- Move all license files to NVR-specific JVM directory. - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used. - Resolves: rhbz#1896609 P �]�J� � P ���]s�5�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr�- Add man page for kbdinfo, link open man page to openvt man page Related: #949015�^��\s�K�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(�@- Replace CtrlL_Lock with Caps_Lock in generated us.map Resolves: #1441411 - Improve man pages and usage messages quality and consistency Resolves: #949015{��[s��Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X��@- Add compose rules to generated cz.map Resolves: #1181581n��Zsm�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W ��- Add eurlatgr console font Resolves: #1310286� ��Ys�G�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$�- Include xkb layouts from xkeyboard-config converted to console keymaps Resolves: #1122058N��Xa?�Daniel Mach <dmach@redhat.com> - 1.15.5-10R�U�- Mass rebuild 2014-01-24M��W_?�Daniel Mach <dmach@redhat.com> - 1.15.5-9R�k�- Mass rebuild 2013-12-27 " p W� � " {��es��Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X��@- Add compose rules to generated cz.map Resolves: #1181581n��dsm�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W ��- Add eurlatgr console font Resolves: #1310286� ��cs�G�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$�- Include xkb layouts from xkeyboard-config converted to console keymaps Resolves: #1122058N��ba?�Daniel Mach <dmach@redhat.com> - 1.15.5-10R�U�- Mass rebuild 2014-01-24M��a_?�Daniel Mach <dmach@redhat.com> - 1.15.5-9R�k�- Mass rebuild 2013-12-27�$��`q�Y�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R��@- Fix vlock doesn't perform PAM account management or credential reinitialization Resolves: #1032140l��_qk�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock Resolves: #1026819� ��^s�%�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw�- Fix vlock when console or terminal is closed abruptly Resolves: #1486233 9 ��� � � 9 N��la?�Daniel Mach <dmach@redhat.com> - 1.15.5-10R�U�- Mass rebuild 2014-01-24M��k_?�Daniel Mach <dmach@redhat.com> - 1.15.5-9R�k�- Mass rebuild 2013-12-27�$��jq�Y�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8R��@- Fix vlock doesn't perform PAM account management or credential reinitialization Resolves: #1032140l��iqk�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-7Rz/@- Add PAM config for vlock Resolves: #1026819� ��hs�%�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw�- Fix vlock when console or terminal is closed abruptly Resolves: #1486233���gs�5�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr�- Add man page for kbdinfo, link open man page to openvt man page Related: #949015�^��fs�K�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(�@- Replace CtrlL_Lock with Caps_Lock in generated us.map Resolves: #1441411 - Improve man pages and usage messages quality and consistency Resolves: #949015 c _�n� � c � ��rs�%�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-16aw�- Fix vlock when console or terminal is closed abruptly Resolves: #1486233���qs�5�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-15[qr�- Add man page for kbdinfo, link open man page to openvt man page Related: #949015�^��ps�K�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14[(�@- Replace CtrlL_Lock with Caps_Lock in generated us.map Resolves: #1441411 - Improve man pages and usage messages quality and consistency Resolves: #949015{��os��Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-13X��@- Add compose rules to generated cz.map Resolves: #1181581n��nsm�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-12W ��- Add eurlatgr console font Resolves: #1310286� ��ms�G�Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-11T$�- Include xkb layouts from xkeyboard-config converted to console keymaps Resolves: #1122058 / ��&V � / ���xi�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���wi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��vi�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���ug�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��tg�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��sgY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129 � NU�: � ^��}gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���|i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���{i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��zi��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��yi�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K�� i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��~g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 e �r+��V��: � � e D�[ � b8c980b0d2eaf56affe69fde8c004c91dde7d83277578de4cfc8c06aaa322858D�Z � 80196e9f5cfeb1b79fee9a0c7fdadd992ab7aa207db374333f67dbda5f2fd14eD�Y � 6964dd0077dc7a05fc63ad2b2e02aecba267ac20fdf80589b768e01146960b74D�X � 7b90cb8bc8d2c7faf537d5ae45a0a5a1723647451341f52d133cd54aed8e427cD�W � d1b44c5bcb094399e0bce41de4218e28b8f69fb0c0a79c24411b5561978ec6b5D�V � b128da11799b79cddf1ef0419560127564929391ef662226704b79b39ab3bb98D�U � c4848c6ee81a224b1eb505bb2bf5a9c8572e930973b92319a6e17e294d14310bD�T � dd1acce44324d0f78c3fefe9d62e4f6b967b6a1f192ce18c8c0336a4c8adabd0D�S � d837edc3c03b3b3e816e3578cfb0fb39a5018c0d8b79486829a91303a31fba95D�R � 4159fb078456195a5426e0c1b4c344097b8cea15b93d89a5b0edec624c3dfabaD�Q � 81fe53c540c2219cdfff5019d61db2306219389015797fa7f76cb1b9d772482aD�P � a1ca7e4977e1aa55e582537db75040c395105cb35ed1d15da80d8a11e4a3f662D�O � 52427e37a69f9019c71338e82cb47b4093f49f6cbe7aaf6c7472b6ece216b3bd � ��1 � ��� i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560��� i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K�� i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441��� g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-�� i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ��� i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560��� i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K�� i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441��� g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[�� g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��%gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���$i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���#i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��"i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��!i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���*i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���)i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��(i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���'g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��&g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��/gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���.i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���-i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��,i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��+i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���4i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���3i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��2i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���1g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��0g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��9gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���8i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���7i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��6i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��5i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���>i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���=i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��<i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���;g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��:g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��CgY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Bi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Ai�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��@i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��?i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���Hi�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Gi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Fi�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Eg�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��Dg�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��MgY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Li� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Ki�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Ji��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��Ii�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���Ri�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Qi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Pi�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Og�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��Ng�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 : NU�: ���Vi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Ui�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Ti��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��Si�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � � �P��X�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��W��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��Z��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t��Y��e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��\��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �X��[��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��]��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��^���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��_��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] bR MRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ �# ف�% ځ�( ہ�* ܁�/ ݁�4 ށ�9 ߁�> �C ၘG ⁘L じQ 䁘V 偘] 恘e 灘l 聘r 遘x ꁘ} 끙 쁙 � � � �% �* ���/ ���4 ���9 ���> ���C ���H ���M ���R ���V ���X ��Z ��\ ��] ��^ ��_ ��` ��a ��b ��c ��d ��e ��g ��h ��j ��l ��n ��q ��s ��u ��w ��z ��| ��} �� !�� "�� $�� %�� &�� '�� )�� +�� -�� .�� /�� 0�� 2�� 3�� 4�� 6�� 7�� 8�� 9�� ;�� <�� =�� >�� ?�� @�� A��! B��# C��$ D��% E��& F��' G��( H��) I��* K��, L��. �q��`��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��a��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �f��b��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��c���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��d��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��e��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��g�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE �^��f��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��h���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���j��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��i��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��ls��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J��ks�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��ns��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��ms�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��qs�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���ps�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���os�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���s��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��rs��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��us��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �^��t��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��ws��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��vs�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��zs�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���ys�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���xs�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���|��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��{s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��}��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^����7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��~��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ? ' ? �[����1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 #�T����#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ������Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ( e �r+��V��: � � e D�h � d407c748075b7355c9958eda5ff21771b816ee274b0d13adadeb34a3d3cb72edD�g � e7f2bf03392856717c1588ee1a77010b1537d1a678ed7dd1dad5ad7391cd4147D�f � 82e182e512caa6c722313fe432c89e81a61b1c021c5fa0e223a163e77c95ce6eD�e � f8613e068693df3d5e08f956697ae0b595071f7b8c8bbed307faf9dbadef2a8aD�d � 53452ad31f9655e8f71a0b4c49b118b9337855433c50f25a9f5a75b92ebb8a8aD�c � 645ff71bbd0c6801049154ee1c5338517839d23b8146501039a0a919dd696e33D�b � a6fb96a295e675646b15c339c7b3d6070fefdec2a9d1b67402bcee35dc06bd72D�a � 93f5058bbfe57b3134debfc599214a91d401380ef38ec57336a0d995704d9c26D�` � f181f4bc3868b84eb350197aee4e79d0466d5aaac0e0a70a37eb58aa7533e228D�_ � 91d2cf4d7a40fe66ba14583d4d5f045850fefc8b26b7e0adc2634f5ec9f9a775D�^ � 3db35ae4792e6efe04cf89e50aeb71e9794589152c92cc1de54f2c92dc956b40D�] � 9f794072765d2423d8dc156f9a676c6e2b29c90d2a6f4e58cb579073b02c4017D�\ � 996ee55268c9971d07d38c3217e0fb813a202d1b838963b6db16217069d193db ? ' ? �[�� ��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ,�T�� ��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�� ��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�� ��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J�� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ������Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend 1 K K �/����Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[����1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 5�3����a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ������Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend : K K �/����Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3����a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:�� ��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/�� ��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�� ��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3�� ��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���!�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:�� ��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���#�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��"��{�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��$��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���%��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��&���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���'�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��(��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���)��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��*���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���,��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��+�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP J S z S �"��.��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���-��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���0��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��/��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���2��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��1�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP N S z S �"��4��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���3��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��5��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��6���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���7���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��9��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���8��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���;��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��:��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��<��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��=��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��>���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���?���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��A��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���@��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��D��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��C��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��B��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��E���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���F���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��H��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���G��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��K��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��J��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��I��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��L�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���M�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 a n n � ��O��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��N��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��Q��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��P��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��R�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���S�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 f �i��T��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��U��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��V��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��X��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��W��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���Y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 l �i��Z��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��[��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��\��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��^��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��]��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��`��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���_��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���c��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��b��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig t�Z��a��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] uet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush vif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r weform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��f��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig y�Z��e��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��d��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] zet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush {if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r |eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��h���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ~���g��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���j�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��i��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���ns�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���ms�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��l��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��k���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��ps��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��os�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���q��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��s�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��r��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��u��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��t��e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��w��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��X��v��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ O��2 P��4 Q��5 R��6 S��7 T��9 U��; V��< W��= X��> Y��? Z��A [��D \��E ]��F ^��H _��K `��L b��M c��O d��Q e��R g��S h��T i��U j��V k��X m��Y n��Z o��[ p��\ q��^ r��` s��c x��f }��h ��j ���n ���p ���q ���s ���u ���w ���y ���{ ���} ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���" ���# ���% ���( ���+ ���, ���. ���1 ���3 ���4 ���6 ���9 ǁ�: ȁ�; Ɂ�= ρ�? Ё�@ с�B ҁ�C Ӂ�E Ձ�G ց�H ׁ�J �K ف�M ہ�P ܁�R ݁�S ށ�U �Y ၛ[ せ_ 䁛c �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��y���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ����x��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���{�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��z��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��}��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��|���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��~��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+����U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S�� ��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%����I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\����7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+����U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S����%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%����I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] e �r+��V��: � � e D�u � 95abbd8b6931c04aa8fdca6df2600bc37b23414c8395a75a4ef0a54d57357161D�t � 804cbacad84b958748331da1bcd0479ae493f31fb8564a84104a6573e7aa7c81D�s � 7804215d9e8fd6eaae4ae7d7fb360dd0ec85e87ed93ec488ef3d1cb1285ff33eD�r � 4a74ed8e2ec25ff2f90a460ace450f1f5f9d8ec2388840ac54190eadc8a43575D�q � 9e3c7f90c42ce49e7b713d239d0814692a9206c40398c880f541a2a12d8aa210D�p � 6b93ef98f6a4d5466b5be6c353e9339237a7ee06b8879ce1e25290af5e63339cD�o � c9bd64813e41abf55c807e7a4e61c62906d1c51817c09e583a7b4306568104a8D�n � ea4070c75f7c99de5202445cbf44e188a168785685b3ee3a524f47abd2e476b2D�m � faf10a9ee4a6a84d4d3e47e83fc9b5e9820bc013e514a117737d79a517e0386aD�l � 10d9b8b27ee08f5090cf1a5d694548af27d8f6cdc826e69807773aeb28c9bd11D�k � f66887fb1f33b96e1102061d623623d7d06c2f8b951e00a16b5c6b4d260f7a75D�j � 2a53fc6879935314c27af738cec3350d3ceb42d0ac3d7163f52ab94febb50deaD�i � 6f164909e08bae70614e499ae419c8240f745a3e5a7212281901e38d69a975d4 ( ( �S�� ��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�� ��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]�����)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]�����-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&����K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]�����)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]�����-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ��� ��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l����W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�� ��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 3 ^O$ 3 �l��!��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�� ��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� �� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� �� ��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���"��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��#��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���%��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��$��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��(���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��'���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��&��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���+��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��*��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��)��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��,��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���.��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��-��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��1���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��0���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��/��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���3��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��2���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��4��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���6��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��5��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��9���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��8���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 +��7��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��:���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��;��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��=���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ʄ��<�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��?���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��>���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��@��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��B��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���A�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��C���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��E��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ԅ��D��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��G���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��F��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��H��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��J��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���I�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��K���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��M��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc څ��L��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��P��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���O��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��N��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��R��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���Q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��S���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��U��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ߅��T��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��Y��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��X��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���W��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��V��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���[��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���Z�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��_��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���^��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��]��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��\��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��c��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���b�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���a�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��`��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���fs��Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono � ��es�!�Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean �3��d��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��hs��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J��gs�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��js��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��is�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��ms�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���ls�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���ks�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F��ns��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � �P��p�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol �^��o��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��r��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t��q��e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��t��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �X��s��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��u��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��v���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��w��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��x��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��y��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��z��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��{���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��|��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��}��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE �^��~��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O�� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � �����1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T����#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J��s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j�� s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ��� ��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F�� s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � �� s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �^�� ��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] e �r+��V��: � � e D� � c540f6cbef4a78a050fb751882916735d1bd6054d8c177140c200cf31eaf923fD� � 563fbcd370477439a58af9940298f2c82a2b3a37e487abffaa7f2cc6dc359b31D� � adf17c4b2070f73fe44e9fc11648947e83c86d37a4e3532c9d77d3d8e9ae50e5D� � 179d7e14905a53e3d09515993644464c53e8bf4c10bcd829502d153744fdf666D�~ � a14db656a37e716de6fd51d331dc591f90b663382f88a483d40e8c847e506676D�} � 2c64dd985521f02ada8ac0415b1d852ab79d87ebdf2950e421d8258a4d86d153D�| � a5f9b329bc1130ffe9bf6f2ced3317e2ad895c4559a82bdf804c8b85e4765b28D�{ � 6ce4b480a292b7fa51c31777377a1711c2537597c5cf02d8aa14b345321b67bfD�z � af4714a643e3d4a5fe7d6877aeec7cfc2047da0866e0c7feb3defa34e1c54b14D�y � 5bea05b28dab5f6e5c851855e06049b7d5dcb569c591a728efd7ea42b4a9ac8eD�x � 33b524d6eec3fc82a17df2220b596193025c1faf20c5939c4271809681f95803D�w � 62db43a91b2c1f3cd0407729f5c13f51ea098fea0aa9b90e2444d92166d1817dD�v � bb9d06747ab519acfbcb5813fc1980b1af09ff804dab7cf685cf77230153ea1a to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 �����+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^����7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ? ' ? �[����1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T����#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�� ��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�� ��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J�� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J�� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ? ' ? �[��"��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��!��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��#��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��$��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��%���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��&���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���'���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend K K �/��)��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��(��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] bR bRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ 遛h 끛j 쁛m 큛n p �r �t ���u ���v ���w ���x ���y ���z ���{ ���| ���} ��� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� ��" ��# ��$ ��% ��& !��' "��) $��+ &��, '��- (��. )��/ +��0 ,��2 -��3 .��4 /��6 0��7 1��9 2��; 3��< 4��= 5��> 6��? 7��@ 8��A 9��B ;��D <��F =��H ?��J @��L A��M B��N C��O D��Q E��S F��T G��U H��V I��W J��Y K��\ L��] M��^ N��` O��c P��d R��e S��g T��i U��j W��k X��l Y��m Z��n [��p ]��q ^��r _��s `��t a��v ` H` �[��+��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 %�3��*��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��,��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��-��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��.���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��/���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���0���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend * K K �/��2��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��1��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��3��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��4��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��6��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��5��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��7��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���9�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��8��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���;�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��:��{�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��<��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���=��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��>���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���?�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��@��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���A��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��B���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���D��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��C�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP : S z S �"��F��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���E��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���H��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��G��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���J��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��I�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP > S z S �"��L��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���K��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��M��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��N���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���O���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��Q��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���P��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���S��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��R��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��T��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��U��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��V���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���W���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��Y��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���X��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��\��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��[��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��Z��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��]���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���^���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��`��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���_��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��c��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��b��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��a��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��d�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���e�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 Q n n � ��g��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��f��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��i��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��h��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��j�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���k�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 V �i��l��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��m��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��n��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��p��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��o��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���q�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 \ �i��r��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��s��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��t��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��v��A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��u��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��x��_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���w��+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���{��+Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��z��[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig d�Z��y��3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] eet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush fif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r geform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��~��[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig i�Z��}��3Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��|��_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] jet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush kif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r leform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � �� ��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 n�����}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<����wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���s�1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%����IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��s�Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��s�cJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ��� ��+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P�� �� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol t�^�� ��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9�� ��oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow w�t�� ��eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command u erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n����[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig z�X����-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} e �r+��V��: � � e D� � ea590d364a03624b219bdbcff4119983ab7a1bd31a6a7146afb0d4e684761056D� � a40e6f107134f5d7997968a9ddc2ce1e7beb8cec4d869d04add1181bbf1653fdD� � 29653969b83d43fd83befb74a89b5811c1b7b3d613637aa64efa39a1d4b2e76aD� � 2ac60b8088805d258f480005417e5958a86da93d764c9825c111401402c2b72dD� � 76b71b906c9f1af8e7860bcf78af0d724ef72c918767fb655b3ac9f2e0e6530bD� � fe5bfef21df5d0e8252e7ac8804794d70a0db68230a14972077289f7d05e21e8D� � 38d054f054325006f87cc688b0f258c342122a6a0a76a8efb07f3c1ff8cd20dcD� � a15acb72ee6adfbf7ace3b47300fda1914cad9d22e255326e32d3a93ce032670D� � b7d834f2cc5aa84ce95931ece2e31ba36b1622f5cf8408527a2a75727e975348D� � 572ff1fa3f621ad26e4183404533f0d373eee24c0a12955ab2ab39ca102d691eD� � fd8e59feae40f80e38ab4a8de84b96325cd6b29832ce967fca67cb83405b1342D� � de7f44e2c7986c23e352486d2894499d26f632330a153b346ea4363cdf0397cbD� � dc90a5cca940b1f478ed520e28cd82492738bbb49889b2cd96a4cff2fbc503bc {et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush |if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r }eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 �����}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<����wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%����IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\����7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+����URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S����%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%����IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\�� ��7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT � P P �+�� ��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S�� ��%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��!��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�� ��IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��"��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��#��%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��&��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��%��IRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���$�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��'��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��)��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���(�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��,��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���+��)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���*��-Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��.��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���-�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��2��KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��1��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���0��)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���/��-Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���4��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��3��WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��5��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 3 ^O$ 3 �l��9��WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��8��KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��7��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��6��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���:��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��;��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���=��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��<��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��@��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��?��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��>��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���C��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��B��WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��A��KRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��D��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���F��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��E��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��I��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��H��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��G��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���K��# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��J��Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��L��' Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���N��# Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��M��9 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ c��{ h��~ m�� o�� p�� q�� r�� s�� v�� x�� ~�� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���" ���# ���& ���' ���) ���, ���. ���2 ���4 ���5 ���9 ���: ���; ���= ���@ ���C ���D ���F ���I ���K ���L ���N ���Q ���R ���S ���U ���W ���X ���Z �[ Á�] Ł�_ Ɓ�` ǁ�b ȁ�c Ɂ�e ˁ�h ́�j ́�k �m Ё�q с�s Ӂ�w ԁ�{ Ձ�~ ف� ہ� ܁� ݁� ށ� ၞ ぞ 偞 恞 灞 聞 끞 쁞 큞 � � � � ��� ���! ���# ���% ���' ���* ���, ���- ���/ ��1 ��3 ��4 � P( � �B��Q�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��P�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��O��U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��R�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��S��) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��U�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ����T�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��W�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��V�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��X��) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��Z��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���Y�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��[�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��]��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ą��\��1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��_�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��^��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��`��) Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��b��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���a�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��c�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��e��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ʅ��d��1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��h��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���g��3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��f��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��j��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���i�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��k�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��m��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc υ��l��1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��q��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��p��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���o��3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��n��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���s��1 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���r�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��w��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���v��3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��u��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��t��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��{��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���z�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���y�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��x��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���~s�Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono ��}s�!Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean փ3��|��e Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � �� s�Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check چJ��s�#Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s�Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�mJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�cJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F��s�Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � �P���� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ߅^����9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9�� ��oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t�� ��eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � �� ��7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han �X�� ��-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f�� ��IAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o����YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q����]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] e �r+��V��: � � e D� � 6817bc65309730ab6a1f49ab977c2ea11a9cb5a2f623376008276eeda89f41daD� � 2e997f7e17c861373d0fa5737eaf371bb9187d5db73e8c89cb03ef342029cfaaD� � 12eb69ce3ab02b67fd35247a607d73a70b5c657c3703598db21a9ebe26e45a42D� � 39ce1d8d6ffa3efde898b475b2be150a92edca9d2aadf7ed8d5d69e6865175f9D� � 22e7b5d6e46a23025f394d1dd9e25e4e5cfd1c5dbb00f74226f20929ee065bd9D� � 1cd93bcccbab328b508e869ff3ceeaa30e1ab5ac781b7a6c3b91207832226025D� � 315bb4f6a8cd60a7becf60b599198a41a19465d28cc706d98dfa3b927f357dadD� � 404156845f116a61c9627f44cc1b924461c60e723c92dd3a152f2840e6e9003aD� � 8764032443efee4dc7bfb0ee1a11749205880cd86b230ad538346b697120c5e7D� � b918eb715248bdb46d8f49387310a25030a9f4fe192d5ee0f69fabde9b84d42dD� � 528d0642b5b6549b3084ad519bbeef6aa4048aa69d52903acce6a22132ac9303D� � 97708bdbb05e028158319a2bcc0079feb219bc2cbe8d1b3c5b3861d43afd818fD� � 3d08be30af99cb4e2248e149d75d36071c2dfd0806f511abe5c972b4051fe7d7 dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ����7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f����IAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o����YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q����]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R���� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE �^����7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � �����1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T����#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � �� s�Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��s�#Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D�� s�Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�� s�mJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��!s�cJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��� s�1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��� s�7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���#��+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��"s�Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��%s�Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^��$��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��'s�Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��&s�mJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��*s�cJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���)s�1Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���(s�7Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���,��+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��+s�Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��-��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��/��7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��.��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��1��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��0�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ? ' ? �[��3��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��2��#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��4��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��5��cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��6��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��7��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���8��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend ? ' ? �[��:��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��9��#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��;��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��<��cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��=��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��>��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���?��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend K K �/��A��YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��@��sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��C��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �3��B��aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��D��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��E��cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��F��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��G��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���H��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend K K �/��J��YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��I��sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��K��aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��L��oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��N��YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��M��sAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��O��aAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���Q�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��P��oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���S�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��R��{Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��T��wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���U��#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��V��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���W�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��X��wAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���Y��#Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��Z��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���\��'Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��[�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP ) S z S �"��^��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���]��}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���`��-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��_��]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���b��'Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��a�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP - S z S �"��d��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���c��}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��e��]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��f��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���g��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��i��_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���h��'Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���k��}Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��j��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��l��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��m��]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��n��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��6 ��7 ��8 ��: ��; ��< ��= ��> ��? ��A ��C ��D ��E ��F ��G ��H ��J ��K ��L ��N ��O ��Q !��S "��T #��U $��V %��W &��X '��Y (��Z *��\ +��^ ,��` .��b /��d 0��e 1��f 2��g 3��i 4��k 5��l 6��m 7��n 9��o :��q ;��t <��u =��v >��x ?��{ @��| B��} C�� D�� E�� G�� H�� I�� J�� K�� M�� N�� O�� P�� Q�� R�� S�� Y�� ^�� `�� a�� b�� c��! d��# g��% i��' n��) p��+ q��- s��. t��/ u��0 v��3 x��4 y��5 z��6 {��9 |��: }��; ~��> ��? ���A ���D ���F ���J ���L ���M ���Q � � ���o��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��q��_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���p��'Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��t��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��s��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��r��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��u��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���v��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��x��_Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���w��'Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��{��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��z��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��y��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��|�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���}�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 A n n � ����9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��~��QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ����9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"�� ��?Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I���� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 F �i����QRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_����=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7����mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!����ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7����mRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ��� �� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 L �i�� ��Q Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_�� ��= Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7�� ��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!����A Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7�� ��m Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p����_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]�����+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� �����+ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n����[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig T�Z����3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] Uet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Vif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Weform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] e �r+��V��: � � e D�) � 610253d61d946788184230adb18227e8e92b245a2c2244a5d929b1b096fe7faaD�( � 3668549b1c43bc2b0dd420108f4ebcc8bff57ef08d4b839f3f8e6f9c4691f314D�' � eeb0ed8d5fd30d98e3bef225ead945fafb2e3dbd8cea8e4b45565671473073d7D�& � 2111718d7572c52cddb1070151dd723808174e0f46528dd636ee9dd3afc41523D�% � fe35603b7abe8e1540b93b5c81f16503aa0704fb2bffed7d863b738cf0cf67b4D�$ � 3f9a0f21e2acc0ae5b83814ce830b1a500157b9c6b68efd957007ce368622288D�# � 1b481cd6a6df8a141bc7064b72ffee022095969d0a25a8b9a57bfdc1ec3af7beD�" � a895efeb08422b537678146fb9329ca6a9b3238f9291a15d091a5a70273cfab3D�! � c6b55809244b010e1d1dc344b9add936f4598f2be100373d25749f6d2da8522dD� � dbbb88d9eb3b101dd3369a46793946b7cefc449cb1c00dab5affc0a3c6adfad7D� � 0a755493662be885a9d421b00ff08001a5d61a085bb86846d60072222530e672D� � 03c6e9f83275661d1eb892af76411bc871b3f442dc65c95ad96dadbaffe84cf7D� � aa2c7472ee44f9db48646789dbda352a7399c0d9f9e2644db03345bfbf705395 � , � �n����[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig Z�Z����3 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p����_ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] [et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush \if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r ]eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 _�����} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ����� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<����w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ��� s�1 Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��� s�7 Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%�� ��I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ���� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F�� s� Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j�� s�c Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���!��+ Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��#�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol e�^��"��9 Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��%��o Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow h�t��$��e Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command f erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��'��[ Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig j�X��&��- Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} ket() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush lif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r meform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��)�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 o���(��} Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���+�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��*��w Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��-��I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��,�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��.��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT r P P �+��/��U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��0��% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��3��I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��2�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���1�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��4��7 Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT w P P �+��5��U Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��6��% Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��9�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��8��I Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���7�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��:�� Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��;��%!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��>��!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��=��I!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���<�� !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��?��!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��A��!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���@�� !Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��D��!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���C��)!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���B��-!Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��F��"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���E�� "Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��J��K"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��I��"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���H��)"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���G��-"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���L��#"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��K��W"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��M��'"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � 3 ^O$ 3 �l��Q��W#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��P��K#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��O��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��N��9"Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���R��##Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��S��'#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���U��##Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��T��9#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��X��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��W��#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��V��U#Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���[��#$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��Z��W$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��Y��K$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��\��'$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���^��#$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��]��9$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��a��$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��`��$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��_��U$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���c��#%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��b��$Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��d��'%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���f��#%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��e��9%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��i��%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��h��%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��g��U%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��j��%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��k��)%Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��m��&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ����l�� %Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��o��&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��n��&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��p��)&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��r��Q&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���q�� &Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��s��&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��u��m&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����t��1&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��w��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��v��e&Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��x��)'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��z��Q'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���y�� 'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��{��'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��}��m'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����|��1'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_�� ��='Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��~��e'Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i����Q(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@����(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����m(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ������1(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � �� ��7(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_����=(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e(Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ��� ��1)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]��� �� (Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_����=)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3�� ��e)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7�� ��m)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<����w)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}����� )Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]����� )Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ����7)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���s�*Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono NJ ��s�!*Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ƃ3����e)Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] e �r+��V��: � � e D�6 � 2c612e423c3e3ace2108965f2996ecb1002eee8415cdce8e05c58aafa5f37306D�5 � f066c4d77c32004d1843615beab2f59dce9664e5e79aaf6f5453d44d0d9e02feD�4 � 72dc266e5da09e38d19f4c3904bdb983146af68adbe466120ff8bfecdb4567bfD�3 � 5ec120d1c66453ab1a85e5107b0b4457686f595cf2e8dfc5ca04adcec4f0ade0D�2 � 7d9fd10906d65ff1e5f7dc8aed453f9fa04ddb34ca3a6622b45b15bbf2b7dc66D�1 � ea73cbefe91a8c86fea9a227d19b9f36d68daa5f9e640d6d6acf7a6ad65c4297D�0 � e2b80fc90e80e10166a785ab1c718ed12380055d955ab295c5363ad6405fe815D�/ � 3f77e8c91079e010fb161e28eaf613452e1c25d2d67b0367cb344f3141bf3cb9D�. � 1a74fcb33103de74d5129a6eea3fe37137b7cbdc136b11a49f79822b8fbd6194D�- � 6cfb6bf58c05c3d5623f5406c5e146a76aced8a97fef4153ef7d295cc5776298D�, � d093869ed5878283193de6a764e7847674976671131c829603d9981e56660bfbD�+ � e3d2e5a0802cde0d09552d1bd3102383e1851a9aecf88fd83a5fb81baae6d53cD�* � ef3258341d0c757014a17a4cc94207f623282b6190b470f1517c29d8bb42218f up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��s�*Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ʆJ��s�#*Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s�*Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m*Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j�� s�c*Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��� s�1*Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7*Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F�� s�*Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � �P�� �� +Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol υ^�� ��9+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��"��o+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ҉t��!��e+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��$��7+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ԄX��#��-+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��%��I+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��&��+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��'��Y+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���S ���U ���X ���[ ���\ ���^ ���a ���c ���d ���f ���i ���j ���k ���m ���o ���p ���r ���s ���u ���w ���x ���z ���{ ���} ��� ��� ��� ��� ��� ��� � Á� ā� Ɂ� ˁ� ́� ́� � с�" Ӂ�$ Ձ�% ց�& ׁ�' ف�( ہ�) ܁�* ݁�+ ށ�, ߁�- �/ 0 だ2 䁠4 恠6 灠9 聠; 遠= 끠? 쁠B 큠D E G �I �K �L ���M ���N ���O ���P ���R ���S ���T ���U ���V ��W ��Y ��[ ��\ ��] ��^ ��_ ��` ��b ��c ��d ��f ��g ��i ��k ��l ��m ��n ��o ��p ��q ��r ��t ��v �q��(��]+Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��)��7,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��*��I,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��+��,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��,��Y,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��-��],Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��/�� ,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE �^��.��7,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��0��,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���2��1,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��1��#,Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��4s�-Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �J��3s�#-Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��6s�-Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��5s�m-Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��9s�c-Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���8s�1-Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���7s�7-Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���;��+-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��:s�-Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��=s�.Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check �^��<��9-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��?s�.Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��>s�m.Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Bs�c.Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���As�1.Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���@s�7.Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���D��+.Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��Cs�.Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��E��9.Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��G��7/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��F��?.Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��I��/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��H�� /Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��K��1/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��J��#/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��L��?/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��M��c/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��N��/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��O��/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���P��/Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��R��10Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��Q��#0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��S��?0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��T��c0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��U��0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��V��0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���W��0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend K K �/��Y��Y0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��X��s0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��[��11Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �3��Z��a0Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��\��?1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��]��c1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��^��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��_��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���`��1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend K K �/��b��Y1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��a��s1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��c��a1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��d��o1Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��f��Y2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��e��s2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��g��a2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���i�� 2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��h��o2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���k�� 2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��j��{2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��l��w2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���m��#2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��n��2Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���o�� 3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��p��w3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���q��#3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��r��3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���t��'3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��s�� 3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP S z S �"��v��?3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���u��}3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���x��-3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��w��]3Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���z��'4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��y�� 4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP S z S �"��|��?4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���{��}4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��}��]4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��~��4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � �����4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��� ��'4Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � �����}5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ����94Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"����?5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1����]5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ����5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � �����5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2�� ��_5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����'5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � �� ��95Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"�� ��?5Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� �� ��95Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � �� ��6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � �����6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����'6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ����96Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����?6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ����96Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I���� 6Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� 6Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 0 n n � ����97Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i����Q6Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] e �r+��V��: � � e D�C � 8cd2d58f528256baddd73bebea799773f83bd54624d090696d0c2ca0cac8656dD�B � 9c8552ce4b79fef3a8e7b55a85b91bd83e2f2765635056bc7064ab7d071c6e1aD�A � f5394565fcf1a20382bcdd1f64e77e587e222a4e135860c31a6a2b4f012e4691D�@ � f0308f6cab8d1b2a831f455e5c9950062be00908841b0a04d0555377c61e49caD�? � c4dd18d9c01ea40a453a4a345bdb13d9ca5f3315e69e78ce7e1f9798972a5d47D�> � a219dbccfdca9ac57c9b9064dffadc0044870709a425252ba874f86cfa15084cD�= � bae6332ef212f5e4fe0b1eada2f87ebde9f8d0ae3bc2bf1231463bddc7837af2D�< � 5b152b26c3cb00751f5faf6a0e5bf8cffab7cb953c9a7a44d5c064beadb2c64bD�; � 5b75d2143ffe291c5183924ee30ab08ceb34c6da47f540b55f39025c5123e419D�: � 66af09f68408482637e668b90619392a27fa21b7d4ed06f3c3cbc60d87ce1d78D�9 � c9c2a62c7fb170cc9007afb571d8b9beab632b42aaef2f1461f8ba0a2c5f6d9aD�8 � 619978f4cd3319fc56335a010d227ac9446de3fe27758ad4f22319183b1a35bbD�7 � e1d60b061557e368c20da15e4517376a49df65648636bd09fa3baa81f162391d � Y� � ����97Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����?7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I���� 7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� 7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 6 �i�� ��Q7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_�� ��=7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7�� ��m7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!�� ��A7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7�� ��m7Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���!�� 8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 < �i��"��Q8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��#��=8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��$��m8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��&��A8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��%��m8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��(��_8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���'��+8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���+��+9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��*��[8Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig D�Z��)��38Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] Eet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Fif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Geform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��.��[9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig I�Z��-��39Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��,��_9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] Jet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Kif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Leform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��0��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 N���/��}9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���2�� 9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��1��w9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���6s�1:Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���5s�7:Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��4��I9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��3��9Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��8s�:Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��7s�c:Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���9��+:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��;�� :Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol T�^��:��9:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��=��o:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow W�t��<��e:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command U erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��?��[;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig Z�X��>��-:Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��z ��| ��} !��~ "�� #�� $�� %�� &�� '�� (�� )�� *�� +�� ,�� -�� .�� /�� 1�� 2�� 4�� 5�� 7�� 8�� 9�� :�� ;�� =��! >��" ?��# @��$ A��& B��( C��+ H��. M��0 O��2 P��6 Q��8 R��9 S��; V��= X��? ^��A `��C a��E c��F d��G e��H f��K h��L i��M j��N k��Q l��R m��S n��V o��W p��Y q��\ r��^ s��b t��d v��e w��i x��j z��k {��m |��p ���s ���t ���v ���y ���{ ���| ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���! ���# ���' ���+ [et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush \if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r ]eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��A��;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 _���@��};Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���C�� ;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��B��w;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��E��I;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��D��;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��F��7;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT b P P �+��G��U;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��H��%;Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��K��I<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��J��<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���I�� <Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��L��7<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT g P P �+��M��U<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��N��%<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��Q��<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��P��I<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���O�� <Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��R��<Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��S��%=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��V��=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��U��I=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���T�� =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��W��=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��Y��=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���X�� =Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��\��=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���[��)=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���Z��-=Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��^��>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���]�� >Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��b��K>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��a��>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���`��)>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���_��->Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���d��#>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��c��W>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��e��'>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for u 3 ^O$ 3 �l��i��W?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��h��K?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��g��?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��f��9>Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���j��#?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��k��'?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for y G ^ G ���m��#?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��l��9?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��p��?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��o��?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 }�+��n��U?Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ~ CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���s��#@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��r��W@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��q��K@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��t��'@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���v��#@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��u��9@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��y��@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��x��@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+��w��U@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���{��#ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��z��@Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��|��'ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for � G ^ G ���~��#ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��}��9ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B����ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �� ��ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+����UARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L����ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U����)ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ����BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ������ ARado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L����BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B����BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U����)BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i�� ��QBRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]��� �� BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@�� ��BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7�� ��mBRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ���� ��1BRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L����CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3����eBRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U����)CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i����QCRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@����CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����mCRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ������1CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_����=CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3CRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����eCRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] e �r+��V��: � � e D�P � e888a6e4abc3928d95ec0b18f8a42febb63ba70ba0371c23615b8823209d9317D�O � ba5a53ea9bd2aff2765fd9fc38a3f75ecd5d3e617e1c2cb85f6a9a793063506cD�N � 506818895cd30b93e3417b8379f3afc7f80a2a69c7739886bc58648f153fb9e6D�M � ad7bce9b915192b7b549afd2ed6063d2ada93cb004d25d42dc82dd3313d82a37D�L � 52fc84afa30b500c79c2116a67a199c3eba6bbed1b7b171fc4fec483dc2c9f4cD�K � 4abf0ebc2127e7a5b5dfb595fa447cb44f339ff023ce88bb0a97992bba4cd3a9D�J � 961c48cd798bb2acb18bcb4bd7ebd24f8752f021a87363745131dc5e83535165D�I � cd7d87fbf38e3d491a5a8b262d70dddd01ac00ec722b52c01b44e67f7d8c5a66D�H � e7e90b3e6ae85deb749d4071a5467a5a718a12808213ecd6657a9d70d12129ceD�G � c59ce9d5e2b28c278b947391fce0c591d912b04727d6141c27262cf98fb99844D�F � 8c51f1c38ad47d554e10f738e37c0bf122f76f4859f755e0449895448111fdfbD�E � 90add33a3f4cc834b9be91c4ccc12114abeee16aab262829030db0c9ce27fafeD�D � 61cfa80ff521cdee2ca184780c2e8e55454cba77894c18944b233eb145b6c262 � � � �i����QDRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@����DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7�� ��mDRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ���� ��1DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��!��7DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_�� ��=DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]��� ��3DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3�� ��eDRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���#��1ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���"�� DRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��'��=ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���&��3ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��%��eERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��$��mERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��+��wERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���*�� ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���)�� ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��(��7ERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���.s�FJan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono �� ��-s�!FJan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ��3��,��eERado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��0s�FJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��/s�#FJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��2s�FJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��1s�mFJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��5s�cFJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���4s�1FJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���3s�7FJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F��6s�FJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � �P��8�� GAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��7��9GAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��:��oGAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow t��9��eGAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��<��7GAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ĄX��;��-GAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��=��IGAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��>��GAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��?��YGAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��@��]GAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��A��7HAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��B��IHAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��C��HAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��D��YHAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��E��]HAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��G�� HAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE Є^��F��7HAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��H��HAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���J��1HAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��I��#HAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��Ls�IJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ԆJ��Ks�#IJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Ns�IJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Ms�mIJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Qs�cIJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Ps�1IJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Os�7IJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���S��+IAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��Rs�IJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��Us�JJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check م^��T��9IAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Ws�JJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Vs�mJJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Zs�cJJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Ys�1JJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Xs�7JJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���\��+JAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��[s�JJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��]��9JAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��_��7KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��^��?JAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��a��KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��`�� KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��c��1KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��b��#KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��d��?KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��e��cKAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��f��KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��g��KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���h��KAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��j��1LAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �T��i��#LAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��k��?LAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��l��cLAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��m��LAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��n��LAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���o��LAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��q��YLAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��p��sLAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] bR 2RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���0 ���2 ���5 ���6 ���8 ���: Á�< Ł�= Ɓ�> ǁ�? ȁ�@ ʁ�A ˁ�B ́�C ́�D �E ρ�G с�H ҁ�J Ӂ�L Ձ�N ց�Q ׁ�S �U ځ�W ہ�Z ܁�\ ݁�] ށ�_ �a ၢc ぢd 䁢e 偢f 恢g 聢h 遢j 끢k 쁢l 큢m n �o �q �s ���t ���u ���v ���w ���x ���z ���{ ���| ���~ ��� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� ��! ��$ ��% ��& ��( ��+ ��, "��- #��/ $��1 %��2 '��3 (��4 )��5 *��6 +��8 -��9 .��: /��; 0��< 1��> ` H` �[��s��1MAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �3��r��aLAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��t��?MAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��u��cMAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��v��MAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��w��MAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���x��MAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��z��YMAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��y��sMAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��{��aMAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��|��oMAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��~��YNAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��}��sNAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3����aNAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ����� NAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:�� ��oNAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ����� NAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@����{NAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>����wNAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � �����#NAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M����NAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ����� OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>����wOAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ��� ��#OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M�� ��OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ��� ��'OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H�� �� OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP S z S �"����?OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]��� ��}OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , �����-OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1����]OAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + �����'PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H���� PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP S z S �"����?PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]�����}PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1����]PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ����PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � �����PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����'PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � �����}QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ����9PAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] e �r+��V��: � � e D�] � 5cf93be19fa91922ddc7ba9806b15e6fe9b422f89ed4b63465373a0a29b17e95D�\ � 39d478d2186cad86df1a7e0bcfb9ec33d5205653c9b51f111a67f541511da671D�[ � 89fc26f9b9704d242bcd1974e846283609f11bf4dc47d614efae548b2b836ec9D�Z � d41b5d8b6192712bf36a8ca2a106db94ce0b4451ac3b212fd91ab7cb0ed75e82D�Y � 9b3822948ac2fa18132b7f9d9a7d2a194615f396f5dc14dd0ecaa0ee2975470eD�X � 6ba3e0dd497e559f7b44eabac8136c12499febdb7526dbf3ba89a7b3627aed84D�W � 376c21e2589fa7b033d3dbd7673defdb1d5e23c6ad32b112bddd31ae3915a582D�V � 17401dca64ff03c547fb51c7e83d60963cc03409dbba4804272853959d2b9a21D�U � 7e0b3e536d03b5890007813734653bd6fbc40e2af79d298e9448d84e81ea4734D�T � d2642493abe4c602af8bd00a8d0954219b93cb84fabd9870230cad39d45b9ee7D�S � b31602d66dc65e0bd7a5dac4f9770030528982795cfb1eb49b0cc1eea4786f27D�R � 3398d3a8a0f8d7273ef408e2922e3b985aab4a0398a30203ce247637331432d5D�Q � 07505d8e7877d8a5114d6db605a9dc9c2132c0d32d978e2df599fa2e69887780 � � �"�� ��?QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1�� ��]QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � �� ��QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��� ��QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��!��_QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��� ��'QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��$��9QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��#��?QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��"��9QAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��%��RAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���&��RAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��(��_RAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���'��'RAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��+��9RAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��*��?RAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��)��9RAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��,�� RAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���-�� RRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 ! n n � ��/��9SAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��.��QRRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��1��9SAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��0��?SAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��2�� SAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���3�� SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 & �i��4��QSRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��5��=SRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��6��mSRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��8��ASRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��7��mSRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���9�� TRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 , �i��:��QTRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��;��=TRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��<��mTRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��>��ATRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��=��mTRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��@��_TRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���?��+TRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���C��+URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��B��[TRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig 4�Z��A��3TRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] 5et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush 6if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r 7eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��F��[URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig 9�Z��E��3URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��D��_URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] :et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush ;if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r <eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��H��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 >���G��}URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���J�� URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��I��wURado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���Ns�1VJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Ms�7VJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��L��IURado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��K��URado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��Ps�VJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��Os�cVJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���Q��+VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��S�� VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol D�^��R��9VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��U��oVAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow G�t��T��eVAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command E erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��W��[WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig I�X��V��-VAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} Jet() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush Kif write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r Leform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��Y��WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 N���X��}WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���[�� WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��Z��wWRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��]��IWRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��\��WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��^��7WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT Q P P �+��_��UWRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��`��%WRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��c��IXRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��b��XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���a�� XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��d��7XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT V P P �+��e��UXRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��f��%XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��i��XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��h��IXRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���g�� XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��j��XRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��k��%YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��n��YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��m��IYRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���l�� YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��o��YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��q��YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���p�� YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��t��YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���s��)YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���r��-YRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��v��ZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���u�� ZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��z��KZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��y��ZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���x��)ZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���w��-ZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���|��#ZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��{��WZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��}��'ZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for d 3 ^O$ 3 �l����W[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�� ��K[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ����[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��~��9ZRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i �����#[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����'[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for h G ^ G �����#[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ����9[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B����[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ����[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 l�+����U[Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} m CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV nE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 oCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 p] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ��� ��#\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l�� ��W\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&�� ��K\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�� ��'\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for r G ^ G �����#\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �� ��9\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B����\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ����\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 v�+����U\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} w CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV xE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 yCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 z] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � �����#]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L����\Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����']Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for | G ^ G �����#]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ����9]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ 3��C 8��F =��H ?��J @��N A��P B��Q C��S F��U H��W M��Y O��[ P��] R��^ S��_ T��` U��c W��d X��e Y��f Z��i [��j \��k ]��n ^��o _��q `��t a��v b��z c��| e��} f�� g�� i�� j�� k�� q�� s�� t�� u�� {�� }�� ~�� ��� ��� ��� ��� ��� ��� ���" ���# ���% ���' ���( ���* ���+ ���- ���0 ���2 ���3 ���5 ���9 ���; ���? ���C ���F ���H ���J ���M ���N ���P ���R ���T ���U ���V ���W ���X ���Y ���Z ���[ ���\ ���] ���_ ���` �b Á�d Ł�f Ɓ�i ǁ�k ȁ�m ʁ�o ˁ�r ́�t ́�u �w Ё�y с�{ Ӂ�| � P( � �B����]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ����]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ��+����U]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L����]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U����)]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � �� ��^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ���� �� ]Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} e �r+��V��: � � e D�j � d561b43042ddb9d02a31ae81d1c4935a05988542719e259b277dfcc2995339cfD�i � 4f26a49ed12aa41e17cd5c146486cc8db5796101704d7b492066007312935250D�h � cda402fcb291052201381d37c733af954d30e2e6e3f24e5b636ae67715e8c0d0D�g � 29feb5e5f9922979d66fabe2aac8bd7fdd18f1915777acf5b360bb7e5cdb0109D�f � 4eb98f8f58cf6cec17799f6df6cd52b55de57ac3aef90f330df1e07c1f8f3702D�e � 82269d23d95a9f1e1e213464701f07feb1fb5233bc66364a7b39d1a25b4a7a72D�d � 4684e767f94d3dbc6eaccc3037287d441ff4f9d0bda6586211a7181edd68f6a8D�c � 81b2e85bd83c8dc868290121adb4b8821c2da304dd04a69ec5ea65031c46d351D�b � 361435b0149d64bce7ddd96522893346319af483ba71ff2f7d32c353614b224fD�a � 95328dc6ff974a63f71a020d2f75e367ec10635e3db3ece1c6894c07d22f40cdD�` � 73b613dd48f531b02ef3e8b042c6bb5fa7f517faeedbd0883ebda2f46aca3135D�_ � 2a085ac87e43c3c43e031cb33170bfabf4fbeea917c6492d513aab56393104b5D�^ � e73e80ff6eb4ad13c6cbb061fbc0b000631cf8e49449db648db76556adee995e � CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV �E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 �CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 �] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L�� ��^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B�� ��^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U�� ��)^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��"��Q^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���!�� ^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��#��^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��%��m^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����$��1^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��'��_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��&��e^Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��(��)_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��*��Q_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���)�� _Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��+��_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��-��m_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����,��1_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��0��=_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���/��3_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��.��e_Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��2��Q`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���1�� `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��3��`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��5��m`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����4��1`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��9��7`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��8��=`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���7��3`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��6��e`Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���;��1aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���:�� `Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��?��=aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���>��3aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��=��eaRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��<��maRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��C��waRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���B�� aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���A�� aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��@��7aRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���Fs�bJan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono �� ��Es�!bJan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ��3��D��eaRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��Hs�bJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��Gs�#bJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Js�bJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Is�mbJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Ms�cbJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Ls�1bJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Ks�7bJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F��Ns�bJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � �P��P�� cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��O��9cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��R��ocAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��Q��ecAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��T��7cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ��X��S��-cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��U��IcAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��V��cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��W��YcAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��X��]cAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��Y��7dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��Z��IdAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��[��dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��\��YdAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��]��]dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��_�� dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^��^��7dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��`��dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���b��1dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��a��#dAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��ds�eJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ĆJ��cs�#eJan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��fs�eJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��es�meJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��is�ceJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���hs�1eJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���gs�7eJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���k��+eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��js�eJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��ms�fJan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check Ʌ^��l��9eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��os�fJan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��ns�mfJan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��rs�cfJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���qs�1fJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���ps�7fJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���t��+fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��ss�fJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��u��9fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��w��7gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��v��?fAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��y��gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��x�� gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��{��1gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ҅T��z��#gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��|��?gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��}��cgAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��~��gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J����gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��� ��gAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[����1hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 څT����#hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����?hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����chAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J����hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J����hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � �����hAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/�� ��YhAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����shAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[�� ��1iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 �3�� ��ahAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b�� ��?iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�� ��ciAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J����iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J����iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � �����iAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/����YiAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����siAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3����aiAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:����oiAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/����YjAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|����sjAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3����ajAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ����� jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:����ojAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ����� jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@����{jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>�� ��wjAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ��� ��#jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M�� ��jAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] e �r+��V��: � � e D�w � f7f4d9e5559f8b130d55ce0048a0976d08ca48b1e818df7319c89d168e26c14eD�v � 0b31fcea001c43db8cd9d635933b11a63756f99e56b454bbfd3b201a1ec4a077D�u � 8a6c2691d1645347df9eff452b78fb18042623b1204c96aafae8161528c51327D�t � 3ad9c854816cd51073279e25d66deb06e14c0f98f40cc6d468a2d1aee2d2c284D�s � 34d206ee003d27edc3b435c9aecc9569a8efa0cebca782b60e595b2c78f06326D�r � f6c9684def9cd5c7f66fcd886ee8773d2b2f5ae9bdb6dfb6f71d2377b140d30dD�q � dc83e35a513a39a6511e6815dff7c318849b1e9ec3399ac8de14115dd8663f84D�p � a80e94c28a71146376496e2e9902a431fca968386feb3bcfc1a8b876f55f48ceD�o � bf636c3d1c7371276e6fcf8c17bb54ad4a7b3adb5b7ac282711c4d8559a5996bD�n � 6a841f73df251cdd51f2173820d7aefd9cdad93e87f34531d4856379e80aebfcD�m � d79bdff199cc5f9127f01f99ca4906b965b3c5fb198906c1ed16e725d5bbe25fD�l � 5573691deaca712e1478b3d889fe322be138680d8955a04b75e3a0066e099ca2D�k � 28f85ca5b6e7c2b1e3ab7c4b31675583e8a72c18188f86f288a9a9bc046a202c t t ��� �� kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>�� ��wkAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���!��#kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��"��kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���$��'kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��#�� kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��&��?kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���%��}kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���(��-kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��'��]kAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���*��'lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��)�� lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��,��?lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���+��}lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��-��]lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��.��lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���/��lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��1��_lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���0��'lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���3��}mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��2��9lAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��4��?mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��5��]mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��6��mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] bR WRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ Ձ�~ ց� � ف� ہ� ܁� ݁� ށ� � ၥ 䁥 健 恥 灥 遥 ꁥ 끥 쁥 큥 � � � � ��� ��� ���! ���" ���$ ���& ���( ���* ���, ��- ��. ��/ ��1 ��3 ��4 ��5 ��6 ��7 ��9 ��< ��= ��> ��@ ��C ��D ��E ��G ��I ��J ��K ��L ��M ��N ��P ��Q ��R ��S ��T !��V "��X #��[ (��^ -��` /��b 0��f 1��h 2��i 3��k 6��m 8��o =��q ?��s @��u B��v C��w D��x E��{ G��| H��} I��~ J�� K�� L�� M�� N�� O�� P�� Q�� R�� S�� U�� V�� � � ���7��mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��9��_mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���8��'mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��<��9mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��;��?mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��:��9mAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��=��nAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���>��nAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��@��_nAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���?��'nAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��C��9nAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��B��?nAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��A��9nAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��D�� nAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���E�� nRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 n n � ��G��9oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��F��QnRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��I��9oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��H��?oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��J�� oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���K�� oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 �i��L��QoRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��M��=oRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��N��moRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��P��AoRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��O��moRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���Q�� pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 �i��R��QpRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��S��=pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��T��mpRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��V��ApRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��U��mpRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��X��_pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���W��+pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���[��+qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��Z��[pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig $�Z��Y��3pRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] %et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush &if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r 'eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��^��[qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig )�Z��]��3qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��\��_qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] *et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush +if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r ,eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��`��qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 .���_��}qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���b�� qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��a��wqRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���fs�1rJan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���es�7rJan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��d��IqRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��c��qRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��hs�rJan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��gs�crJan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���i��+rAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��k�� rAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol 4�^��j��9rAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��m��orAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow 7�t��l��erAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command 5 erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��o��[sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig 9�X��n��-rAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} :et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush ;if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r <eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��q��sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 >���p��}sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���s�� sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��r��wsRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��u��IsRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��t��sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��v��7sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT A P P �+��w��UsRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��x��%sRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��{��ItRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��z��tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���y�� tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��|��7tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT F P P �+��}��UtRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��~��%tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M����tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�� ��ItRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}����� tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D����tRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S����%uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M����uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%����IuRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}����� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D����uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L�� ��uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]����� uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �� ��uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]��� ��)uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]��� ��-uRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L����vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]��� �� vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&����KvRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ����vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]�����)vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]�����-vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x �����#vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l����WvRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����'vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for T 3 ^O$ 3 �l����WwRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&����KwRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ����wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ����9vRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i �����#wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����'wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for X G ^ G ��� ��#wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �� ��9wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B�� ��wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �� ��wRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 \�+�� ��UwRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ] CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV ^E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 _CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 `] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} e �r+��V��: � � e D� � 2a69b561a8c58b7ed126929ce0f305827b54da8604e8f662568fc8ec96090f26D� � 21af3e26269599f29ef700b687a3e84539aa03ffc025f0794649d54f0a041582D� � 454bbafafa2ed6a940377a73f755cc70525a8547533b1c20ff588842216101d0D� � 4d236aaf4435c04e7eca7641052df2e7fe956b46c24fdf530db5d3367025b1f4D� � 0cdf4d5f9455b9e3e0eeca97fcb7fa4f7b76899970af7d0fa1bdc2c1ade16fe2D� � 1bab4a2f960faa0a69de616785116c776e018a15bdc67d8f57416af2a12896dbD�~ � 0bb28c9f68dfa70b3b78027fb8b42c4122bccb671f14d669ce89f85990ee5c7bD�} � 4f80068ba1aae1df0b1a343be00c4f8225667afd61a123bede56704529ab3f6cD�| � 5c75d507373106773899d8f085ed0c9921518de33190dfac20ba2aa951e5b2c2D�{ � ae7235d8eadd22bf19fca7e2a758e17a26c6d01caf6e81861e6bf603fe82cb51D�z � 53cc61153b028eb77eee99eb4b318593a92007ff036a6f6a823411e1ac986690D�y � 51f9017134f88118879ffbdb248450e3b3d9099bcd70dd6c20b9044df41ebaadD�x � 6f9c2eab5630c71a827f71ce416ea6cd0c6b2aba734a2d023f35f7af3d415da4 M ��M ���#��#xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��"��WxRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��!��KxRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��$��'xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for c G ^ G ���&��#xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��%��9xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��)��xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��(��xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 g�+��'��UxRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} h CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV iE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 jCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 k] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���+��#yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��*��xRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��,��'yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for m G ^ G ���.��#yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��-��9yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��1��yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��0��yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 q�+��/��UyRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} r CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV sE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 tCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 u] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��2��yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��3��)yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��5��zRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 y���4�� yRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} z CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV {E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 |CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 }] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��7��zRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��6��zRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��8��)zRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��:��QzRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���9�� zRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��;��zRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��=��mzRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����<��1zRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��?��{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��>��ezRado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��@��){Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��B��Q{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���A�� {Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��C��{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��E��m{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����D��1{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��H��={Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���G��3{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��F��e{Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��J��Q|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���I�� |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��K��|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��M��m|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ����L��1|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��Q��7|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��P��=|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���O��3|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��N��e|Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���S��1}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���R�� |Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��W��=}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���V��3}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��U��e}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��T��m}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��[��w}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���Z�� }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���Y�� }Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��X��7}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���^s�~Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono �� ��]s�!~Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ��3��\��e}Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��`s�~Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��_s�#~Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��bs�~Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��as�m~Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��es�c~Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���ds�1~Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���cs�7~Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F��fs�~Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � �P��h�� Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^��g��9Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��j��oAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��i��eAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��l��7Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ��X��k��-Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��m��IAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��n��Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��o��YAugusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ Y�� Z�� [�� b��# d��$ e��& f��) l��+ n��, o��. p��1 v��2 w��3 x��5 ~��7 ��8 ���: ���; ���= ���? ���@ ���B ���C ���E ���H ���J ���K ���M ���Q ���S ���W ���[ ���^ ���` ���b ���e ���f ���h ���j ���l ���m ���n ���o ���p ���q ���r ���s ���t ���u ���w ���x ���z ���| ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� Á� ā� Ł� Ɓ� ȁ� Ɂ� ˁ� ́� ́� � Ё� с�! ҁ�# Ձ�$ ց�% ׁ�& �' ځ�( ہ�* ܁�+ ݁�, ށ�. ߁�/ �1 ၧ3 4 で5 䁧6 偧7 恧8 灧9 聧: ꁧ< 끧> �q��p��]Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��q��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��r��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��s���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��t��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��u��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��w�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^��v��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��x���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���z��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��y��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��|s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��{s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��~s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��}s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��� s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 �����+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j�� s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]��� s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ��� ��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F�� s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^�� ��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^����7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[����1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 T����#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4����c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ������Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[����1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ʅT����#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4�� ��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J�� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J�� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ��� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��!��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|�� ��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��#��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ԃ3��"��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) e �r+��V��: � � e D� � 6ad05aacb55ec137da2b221c99a490660a5f37778642d8b590d33d5fbb093262D� � 0d768d1ea1cafc2aac35e0917a8c6e9184c802e60dc7add05251d7c940193f32D� � af4cb1545cd730fee8de02f39c8201ee8909319eb1b8d4e09b97227b67b961b8D� � 02d776d9eabc5a1600b998782d8d36dfd9f654699fe0d5ed0fcea97a75b44ac1D� � 4effc7564fc196a4c6411751bedca4e9e01367a459bcaff78bc6849dc7cf71f5D� � 4fdc56dc0f2c90e2f3e04a9191f8f4da825b37f6ac25fe246820e255ce02e8a1D� � e6bb8a9138e3246eedff3c7522b5bdd6a006e9d47913ff4c10817c6036530510D� � 2e6658df1cad274f8acd004adf1a98e57338b7aeae5ac65e2c25e78bfe0d2f99D� � 2617375bbb0a52fe637164f0f40bbbc00ea29b150dd35ba0e0f79447454ad604D� � 3c1d7d5a10b6bbb96820657c57af7a774ba60dd1acb011d623b218102b3251f3D� � 68cfd2b5e2aa6b9bad7a4040def6ccec2aa6ca31c6acf4758e98b507e8efc105D� � e8c1f68569cc209cc9fa2df02ad4b7b0845192e6e74e5167c8cf3400acdc4c2bD� � 2e4f169246c2ce1c02926c3021b68913f273ab5b7474087d761d93b81e98eedb ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��$��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��%��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��&���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��'���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���(���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��*��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��)��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��+��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��,��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��.��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��-��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��/��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���1�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��0��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���3�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��2��{�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��4��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���5��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��6���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���7�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��8��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���9��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��:���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���<��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��;�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��>��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���=��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���@��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��?��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���B��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��A�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��D��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���C��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��E��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��F���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���G���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��I��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���H��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���K��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��J��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��L��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��M��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��N���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���O���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��Q��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���P��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��T��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��S��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��R��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��U���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���V���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��X��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���W��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��[��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��Z��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��Y��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��\�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���]�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 n n � ��_��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��^��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��a��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��`��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��b�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���c�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 �i��d��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��e��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��f��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��h��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��g��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���i�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 �i��j��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��k��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��l��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��n��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��m��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��p��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���o��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���s��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��r��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��q��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��v��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��u��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��t��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��x���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ���w��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���z�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��y��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���~s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���}s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��|��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��{���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F�� s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � �����+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol #�^����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9����o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow &�t����e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command $ erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n����[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig )�X����-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ B D �E �F �G �I �K ���L ���M ���N ���O ���Q ���T ���U ���V ���X ���[ ���\ ��] ��_ ��a ��b ��c ��d ��e ��f ��h ��i ��j ��k ��l ��n ��p ��s ��v ��x ��z ��~ �� !�� "�� %�� '�� -�� /�� 0�� 2�� 3�� 4�� 5�� 7�� 8�� 9�� :�� ;�� <�� =�� >�� ?��! @��$ B��& C��* D��, F��- G��1 H��2 J��3 K��5 L��8 R��; T��< U��> V��A \��C ^��D _��F `��I f��J g��K h��M n��O o��P p��R q��S r��U t��W u��X v��Z w��[ x��] z��` {��b |��c }��e ��i ���k ���o ���s *et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush +if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r ,eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � �� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 .�����}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<�� ��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%�� ��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\����7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT 1 P P �+����U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S����%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%����I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\����7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT 6 P P �+����U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S����%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%����I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S����%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%�� ��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��!���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��$���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���#��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���"��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] e �r+��V��: � � e D� � 94956f35cf998fadb6818b03bda0abd42d6bb6eaef56f6c880f239607a6b876aD� � c61d2053d483f06c16fe09b040f911571abd663498e0d24266d849b51fdb0479D� � e8c196f4e751026825afd99f7aaf6ab5d3234a2fba46b51b585338b80c837da0D� � 7eafe5ff654144eafe243a63bd26f5f8be857f9a6db277149949bba5f768b643D� � 81b4e4f401d2402736ceba4627eaafd5b615c2cc45aa4d4f941ea79562045139D� � 8251d9d6d6785ae0ed2231e5acd6b3d6b86a215d008b16ed8f78ea929cfc9c4dD� � 79d78fa443907f0ca28a70215cf61c47f965c37ef5ad56c02db408bdd9e238c2D� � 3103d16f84c636f0c9414dff8107cf8586ae75fbcb90a3f62b7eee6412a9b821D� � 1824faf3f57ad70fa29640a76cd08c71a18f5f97c91c1117929ab588f9aa44dcD� � 6cdebf9c4780af0f03b80b00c611402cb25855be68d159669e31cebcae14e948D� � 508911ce79f98f5eed94b7cbd546f0c6e54fe284ef02edf721f6bdeea590659cD� � 3b5672f51204c1617610ae8cd9b6f52811ce9c9fa0d5d33100995554e954e356D� � 843def5f9cabf23dde3a6c7cc1d52f68406f3af88c42d2d84dfe7a35cca79197 % v % �L��&���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���%�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��*��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��)���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���(��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���'��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���,��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��+��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��-��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for E 3 ^O$ 3 �l��1��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��0��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��/���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��.��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���2��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��3��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for I G ^ G ���5��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��4��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��8���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��7���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 M�+��6��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} N CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV OE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 PCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 Q] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���;��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��:��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��9��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��<��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for S G ^ G ���>��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��=��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��A���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��@���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 W�+��?��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} X CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV YE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 ZCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 [] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���C��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��B���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��D��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for ] G ^ G ���F��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��E��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��I���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��H���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 a�+��G��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} b CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV cE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 dCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 e] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��J���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��K��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��M���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 i���L�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} j CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV kE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 lCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 m] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��O���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��N���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��P��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��R��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���Q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��S���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��U��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc s���T��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��W���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��V��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��X��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��Z��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���Y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��[���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��]��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc y���\��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��`��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���_��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��^��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��b��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���a�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��c���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��e��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ~���d��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��i��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��h��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���g��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��f��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���k��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���j�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��o��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���n��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��m��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��l��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc � � _TH � �<��s��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���r�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��p��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���vs��Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono �� ��us�!�Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean ��3��t��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} �v) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��xs��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��ws�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��zs��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��ys�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��}s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���|s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���{s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F��~s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � �P�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ��^����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9����o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t����e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ����7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ��X����-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f����I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � �����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o����Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q����]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � �� ��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f�� ��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � �� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o�� ��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q�� ��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^����7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � �����1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T����#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 �����+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � �� s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^�� ��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D�� s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o�� s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��"s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���!s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []��� s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���$��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��#s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��%��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��'��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��&��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} e �r+��V��: � � e D�+ � b38f765f577317761aaaf492c0a93c317974aef18e4e53fea2895acb530ec50eD�* � 3198edac074ce72829e22b3fc0c16b2361413759b0418cd6443a6a5394eaf84aD�) � 394db1fa5c7f0d2612ba1c758328abe415aa0a5677f936aeeb8f95543e5c4110D�( � e107c061dd44f2966524c0a39c675a112e3f712a7f1b891c19bc27ddadc6d91bD�' � 5ff60c9fc8d59e0004f0a615c0b3b023014fe0ba062442fdf0449dd359e754b9D�& � a9a7c7111b8132043c9c9351bdd7bf34051ae1eb9ab0c90e8e7582ca543c49d6D�% � 6ec6b4d2ab3c7cf65dceaadd6a13d91e6ca7e48b3d6bf5712f0c0bf3639015b0D�$ � 3ce3178d47c0937ca4073ad24a4d21e17880a93c83bed7d7cdde515bda87c789D�# � 53ebea1b387c7333eb49334b5bf8e867d5307742f502d7d40091abe8eb42387bD�" � b3587c7ba2e0d12bead8a84ad8d8aad31b6a2da64b0de946850e55afd3787193D�! � cb86f1399947fbb9131708d22997718ff926c00d9e0cdfa9ce37811fe7e47e4dD� � 150b5e83d6acc1e5a6e22bee18216d6c7e0c581dca489071a61aab70eb9b93fbD� � a133fe2fda391e345abde6444e57c6fbfb5ebcfe7720bc5b1ae1c3313bd38aed RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��)���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��(�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��+��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��*��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��,��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��-��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��.���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��/���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���0���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��2��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��1��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��3��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��4��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��5���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��6���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���7���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��9��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��8��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���x ���z ���} ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ��� ���" ���$ ���% ���' ���) ���+ ���, ���- ���. ���/ ���0 ���2 ���3 ���4 ���5 ���6 ���7 ���9 Á�; Ł�< Ɓ�= ǁ�> ȁ�? ʁ�@ ˁ�B ́�C ́�D �F ρ�G Ё�I с�K ҁ�L Ӂ�M ԁ�N Ձ�O ց�P ׁ�Q �R ځ�T ہ�V ܁�X ށ�Z ߁�\ �] ၩ^ _ どa 䁩c 偩d 恩e 灩f 聩g 適i ꁩl 끩m 쁩n 큩p s t �u �w �y �z ���{ ���| ���} ���~ ��� ��� ��� ��� ��� �� ` H` �[��;��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ă3��:��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��<��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��=��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��>���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��?���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���@���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��B��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��A��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��C��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��D��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��F��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��E��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��G��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���I�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��H��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���K�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��J��{�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��L��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���M��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��N���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���O�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��P��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���Q��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��R���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���T��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��S�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��V��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���U��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���X��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��W��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���Z��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��Y�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��\��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���[��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��]��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��^���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���_���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��a��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���`��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���c��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��b��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��d��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��e��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��f���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���g���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��i��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���h��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��l��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��k��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��j��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � ��m���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���n���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��p��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���o��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��s��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��r��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��q��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��t�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���u�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � n n � ��w��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��v��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��y��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��x��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��z�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���{�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i��|��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��}��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��~��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!�� ��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7����m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i����Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_����=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7����m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!����A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7����m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p����_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]�����+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ��� ��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n�� ��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z�� ��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n����[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z�� ��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p�� ��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 �����}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<����w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%����I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � �����+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol �^����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9�� ��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t�� ��e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n�� ��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �X�� ��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��!���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ��� ��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���#�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��"��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��%��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��$���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��&��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��'��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��(��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) e �r+��V��: � � e D�8 � 4f125e807f2d9654af85653665201a2fb6833421172f030513ae09616ba3f069D�7 � c91dc3bbc7593fb7442fa9ec947f30d95bad094d5b4180e4669380d535253bb7D�6 � fd72ad4e19f26b5ab55c6b53a5824234f78c29cf3c20aca13156acea64a3346cD�5 � f53cc1052d30f24f16353f3b8289baea8f6b5784241e361ca528cc3a0eaa3777D�4 � 76facf50f1b80b009a8db32a440b75f305a0ebb492bfd12472396c89645ad637D�3 � b32b8584f13412301461463bde85e0fdc2dde858c115cd5ff1e7c299096a8d77D�2 � 88ec95b43c8491db9c18162f1e7fba8a23bdd4c936af58ebbc5e3ca5294bfb53D�1 � 262dbb7f2a09156ec1388f48b84cdfae97e0c8a8a47a0eabf39d4db7348d2f88D�0 � 85883036219c6afb70af3efeedd40855b4513b05e5a5134abc56c4b95841a125D�/ � 6858b0825e7c10d48e4a834df4baf94b38ae7f99b036340669e3abf74bdfc689D�. � 57519dda2c881614316fc810027c0c66b31bab6e5e16dcd0d91cf84b6d63fc3aD�- � 40b62a1609bf1e6b7221ee088dfbf97f47ad76f2533474c46260a24ca3439cdfD�, � 89508e57764f6439d8043a9ae25c798163d3dc7e1ea5019bab2063d6eaafb9c3 � up � �%��+��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��*���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���)�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��,��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT & P P �+��-��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��.��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��1���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��0��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���/�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��2���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��3��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��6���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��5��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���4�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��7���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��9���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���8�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��<���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���;��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���:��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��>���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���=�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��B��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��A���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���@��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���?��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���D��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��C��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��E��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for 4 3 ^O$ 3 �l��I��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��H��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��G���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��F��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���J��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��K��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for 8 G ^ G ���M��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��L��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��P���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��O���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 <�+��N��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} = CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV >E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 ?CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 @] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���S��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��R��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��Q��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��T��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for B G ^ G ���V��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��U��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��Y���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��X���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 F�+��W��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} G CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV HE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 ICVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 J] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���[��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��Z���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��\��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for L G ^ G ���^��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��]��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ �� �� �� �� �� �� �� �� �� �� ��! ��# ��% !��& "��' #��( %��+ '��, (��- )��. *��1 +��2 ,��3 -��6 .��7 /��9 0��< 1��> 2��B 3��D 5��E 6��I 7��J 9��K :��M ;��P A��S C��T D��V E��Y K��[ M��\ N��^ P��a V��b W��c X��e ^��g _��h `��j a��k b��m d��o e��p f��r g��s h��u j��x k��z l��{ m��} o�� p�� r�� s�� t�� x�� z�� {�� |�� }�� ��� ��� ��� ��� ��� ��� ���! ���" ���# ���$ ���% ���' ���( ���* ���, ���. ���1 ���3 ���5 ���7 ���: ���< ���= ���? ���A ���C ���D � P( � �B��a���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��`���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 Q�+��_��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} R CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV SE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 TCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 U] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��b���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��c��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��e���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 Y���d�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} Z CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV [E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 \CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 ]] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L��g���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��f���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U��h��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��j��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���i�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��k���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��m��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc c���l��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L��o���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3��n��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U��p��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��r��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���q�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��s���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��u��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc i���t��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��x��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���w��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��v��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��z��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��{���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��}��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc n���|��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ����7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_�� ��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��~��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W �����1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_����=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7����m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc q � _TH � �<�� ��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ����7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���s��Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono v� �� s�!�Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean u�3�� ��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} wv) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check y�J��s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F��s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � �P���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol ~�^����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9����o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t����e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � �� ��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han ��X����-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f�� ��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � �� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o�� ��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q�� ��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��!��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han � �f��"��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��#���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��$��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��%��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��'�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^��&��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��(���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���*��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��)��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] e �r+��V��: � � e D�E � 1427f803b91f38e23ae66e6fb49eb6363167e457e76054fcb63fee011d6763b3D�D � 6f1bbacef1dc67ded3f5dae9926f3a9422cbb14531e25cbb1668f8ac69d00b8dD�C � 0952cfe96c702aedc34ce0dcba4f7bde61e7ef84de1ad0057e39e6750b2c0bdaD�B � 8debaae538b7c7704b4ad782c4f0a725f3c0977f97d9cde4eb6a1546e54f02e7D�A � d196c69e20dcc6a970af086c699d1d015396019ac8638386994deb8017fcc72bD�@ � 7c45ba29959e72ceece7bd3f48bcc0ce0a86ebce4677a50e9d95a46e172b5d3bD�? � c3571b20ed80af5bcdad26c4ffded5902a413e69a9f36e66ea22eb7f0b7343beD�> � 73ae0d5fb6285b4b0077f98e47a68f4b9fece79c2d81f4ee0718940d27177616D�= � 56c9932aa2318a64e391b3f64c794e77737aeacd923b2b7d8e02b450cd58abd2D�< � 540ad2675ab792c4e347811b9c59c9dfa46be5932ed582b6b0748c7a27660973D�; � 34255ef50bd9c16239a9a579c23a1bc1f046428a2aecf0fb06e04340b46af985D�: � 5f9ffa10d0718dbd468c695dee255d77d9ba1a9b0d1b7e44a156806dcdca67a1D�9 � d9305a12e977c57f2881d0d6b5d0a5c612d311bf062b22798ff09ce88469752c A � A � ��,s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��+s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��.s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��-s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��1s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���0s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���/s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���3��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��2s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��5s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^��4��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��7s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��6s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��:s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���9s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���8s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���<��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��;s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��=��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��?��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��>��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��A���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��@�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��C��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��B��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��D��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��E��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��F���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��G���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���H���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��J��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��I��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��K��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��L��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��M���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��N���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���O���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��Q��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��P��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��S��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��3��R��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��T��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��U��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��V���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��W���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���X���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��Z��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��Y��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��[��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��\��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��^��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��]��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��_��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���a�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��`��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���c�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��b��{�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��d��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���e��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��f���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ���g�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>��h��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���i��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��j���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���l��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��k�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��n��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���m��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , ���p��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1��o��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ���r��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H��q�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"��t��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]���s��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1��u��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��v���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ���w���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2��y��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]���x��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � ���{��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ��z��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"��|��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1��}��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � ��~���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] bR 'RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���F ���G ���H ���J ���K ���L ���M ���N ���O ���Q ���S ���T ���U ���V ���W ���X ���Z ���[ ���\ ���^ ���_ ���a ���c ���d �e Á�f ā�g Ł�h Ɓ�i ǁ�j Ɂ�l ʁ�n ˁ�p ́�r �t ρ�u Ё�v с�w ҁ�y Ӂ�{ ԁ�| Ձ�} ց�~ � ف� ځ� ہ� ܁� ݁� ށ� ߁� ၬ ぬ 䁬 恬 灬 聬 遬 ꁬ 쁬 크 � � �# ���& ���( ���* ���. ��0 ��1 ��3 ��5 ��7 ��9 ��; ��= ��> ��? ��@ ��C ��D ��E ��F ��I ��J ��K ��N ��O ��Q ��T !��V "��Z #��\ %��] &��a � � ������Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��� ��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � �����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ������Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � �� ��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"�� ��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� �� ��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � n n � ����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i����Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i����Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_����=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7����m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!����A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7����m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i����Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_����=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7�� ��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!�� ��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7�� ��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p�� ��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]��� ��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���#��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��"��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��!��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��&��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��Z��%��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��$��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��(���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ����'��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���*�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��)��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���.s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���-s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��,��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��+���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} e �r+��V��: � � e D�R � 61f3ebaaeea6b7aa7f2cb2e4e49d7030e15a0242954617931c4ca2d74e49c807D�Q � a6114fbcf7f5bf08c4c84d6d0e2551e1175af5cd5b08fe5fa1557b575e292d02D�P � 36f13b26a3b985a2d5e41a86724a23f3387adf18ce34902378ed32345f865d1aD�O � ff0af5a6e3acbbdec8607cb8aa6f258edbb87c22d9e2e162b476d366c16a6372D�N � 64f15baadb874e4dcc756fc50e0f361c704a78fb0c5c3e1dee25e51bd7bc0347D�M � 828e5f8c216c003561b21fac3ee1c2a2c2d556fe14b7f7eb5cecff383dcdcddeD�L � df51484667e5b744416e438fadb87d6b7f90ebd7deb4e6682c6fb5544b4824d9D�K � 39e6418349394ca9bdce4ea754f217c46186d4d7ac6e256c57becbcf78cb2932D�J � c5f291e7ee7a541358f9f6a3957b58ba61670f95010f0fbfb4d6b94d30857d5cD�I � 84a70ceb4fc3a611fb4f2317063db48a3627bf5b481b3c89956e1f1e9fa9f5fcD�H � 078d626065367dc1b0c00d308d8b5d9d69fe369a31b59dbf38747ea1e98647dfD�G � b89f6284503fe622422027e205df72fde54169ba290d768ca1952506a29792cbD�F � 05cf4fd79bba0f69976ed978e39e96312e5c1ed1fc98158138579aa9d2b1ac01 � � � �F��0s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��/s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���1��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��3�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol �^��2��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��5��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow �t��4��e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��7��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �X��6��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��9���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ���8��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���;�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��:��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��=��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��<���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��>��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��?��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��@��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��C��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��B���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���A�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��D��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��E��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��F��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��I���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��H��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���G�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��J���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��K��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��N���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��M��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���L�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��O���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��Q���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���P�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��T���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���S��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���R��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��V���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���U�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��Z��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��Y���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���X��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���W��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���\��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��[��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��]��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for $ 3 ^O$ 3 �l��a��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��`��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��_���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��^��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���b��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��c��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for ( G ^ G ���e��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��d��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��h���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��g���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 ,�+��f��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} - CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV .E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 /CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 0] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M ���k��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��j��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��i��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��l��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for 2 G ^ G ���n��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��m��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��q���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��p���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 6�+��o��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} 7 CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV 8E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 9CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 :] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ���s��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L��r���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��t��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for < G ^ G ���v��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��u��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B��y���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� ��x���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 @�+��w��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} A CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV BE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 D] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L��z���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U��{��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � ��}���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 H���|�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} I CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV JE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 KCVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 L] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B��~���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U�� ��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i����Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc R�����1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3����e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U����)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i�� ��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]��� �� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7�� ��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc X��� ��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_����=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i����Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7����m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ]�����1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ����7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_����=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]�����3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3����e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W �����1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_�� ��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]��� ��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3�� ��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7�� ��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc ` � _TH � �<��#��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���"�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���!�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� �� ��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���&s��Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono e� ��%s�!�Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean d�3��$��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} fv) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��(s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check h�J��'s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��*s��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��)s�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��-s�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���,s�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���+s�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 5 �F��.s��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] e �r+��V��: � � e D�_ � 995f1138e1de2ec2b063d80c34f72c7c9580839633287baad40f5b5b23f9e258D�^ � 6e241bf0dc50bd058f110b48194543b466e895d9ce51ae777aa7f7d34f994e08D�] � 02cbd7332b3ce796fb31c211ff00e807700217dbe4cbf3860f61c4a3bb69beb8D�\ � 69c2b3156d7f7348e92c9b6d94a15da2b8f77e0597041944eb9741c941e07001D�[ � d0f3c1d37d812e6fbf2b4e853fb66fd0ffe2a908b0bd0749ea1f99b53198ad71D�Z � 349059abdcb4206de241619b0a997e70897934335a8863a2070dccf45c49f019D�Y � 08d3a3571d95f12d505af7454de2dadabca497aa265dbce4ff86b0317462b5dbD�X � 44904175313b13552ac962d42d456dc5d52bface994ef485f56c33f7f6971440D�W � 6a47e214a36fc58ad9b00ab50073240c79076c8bd04a01dd01029f8ca43122bdD�V � 9c1793d4db51f7f371d7e73208f169004d3aba5ed38b51d28f55cdcc8cb7f3c0D�U � 84b8b611d8300bcaa1b8a5f55f2a12f6469df74e32e649b9b505e76925339810D�T � 3b37792998533e55b2ebe20d10052f6104ae209a5db1a84826bfde614e6d7c44D�S � 97ca74d50cef86200eaedf11cbb46855b4d2c943de9de770a9b024fbbf90ce3d � � �P��0�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol n�^��/��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��2��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow q�t��1��e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command o erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] y � y � ��4��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han s�X��3��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} �f��5��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��6���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��7��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ )��c *��e +��h 1��k 3��l 4��n 5��q ;��s =��t >��v ?��y E��z F��{ G��} M�� N�� O�� P�� Q�� S�� T�� U�� V�� W�� Y�� Z�� [�� \�� ^�� _�� a�� b��# c��& g��( i��* j��- k��. m��0 p��2 r��4 t��5 u��6 v��7 x��8 z��9 {��: |��; }��< ~��= ��? ���@ ���B ���D ���F ���I ���K ���M ���O ���R ���T ���U ���W ���Y ���[ ���\ ���] ���^ ���_ ���` ���b ���c ���d ���e ���f ���g ���i ���k ���l ���m ���n ���o ���p ���r ���s ���t ���v ���w ���y ���{ ���| ���} ���~ ��� ��� ��� ��� ��� ��� �q��8��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] dle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189] - [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189] - [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189] - [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189] - [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189] - [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189] - [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282} - [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385} - [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033] - [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769} � � � ��9��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.7.1.el7]_���- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203] - [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203] - [powerpc] powernv/dump: Han y �f��:��I�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.8.1.el7]_��- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000] - [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305] - [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716] - [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732] - [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732] - [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950] - [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667] o o � ��;���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.9.1.el7]_�i�- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130] - [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975] - [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190] - [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190] - [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650] - [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212} �o��<��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.10.1.el7]_���- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059] - [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397] - [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477] - [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477] - [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735] - [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735] - [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792] - [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792] �q��=��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.11.1.el7]_��- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643} - [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314} - [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394} - [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661] - [mm] swap_slots: recheck cache->slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915] - [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677] - [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184] - �- �R��?�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE ��^��>��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858] RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} , , �O��@���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519] � ' � ���B��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.2.el7]` l�- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]�T��A��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] A � A � ��Ds��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��J��Cs�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Fs��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Es�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Is�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Hs�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Gs�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���K��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��Js��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � � � ��Ms��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check ��^��L��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Os��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��Ns�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Rs�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Qs�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Ps�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] 5 ���T��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]�F��Ss��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] �^��U��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] w � w �^��W��7�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.12.1.el7]_�@- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985] - [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985] - [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138] - [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980] - [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502] - [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]�!��V��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.2.el7]_��- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} RDEV_REQCNT ioctl (Philipp Rudo) [1896826] - [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364] - [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364] - [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364] - [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364] - [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403] - [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280] - [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280] - [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436} � �� �O��Y���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.14.1.el7]_�@- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208] - [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979] - [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311] - [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839] - [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]�R��X�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.13.1.el7]_�S�- [s390] zcrypt: Fix ZCRYPT_PE � ? ' ? �[��[��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��Z��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��\��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��]��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��^���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��_���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���`���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � ? ' ? �[��b��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��T��a��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.15.1.el7]_�=�- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386] - [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756] - [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911] - [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110] - [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110] - [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110] - [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041] ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��c��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��d��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��e���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��f���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���g���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��i��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��h��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] ` H` �[��k��1�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.16.1.el7]`�- [tty] Fix ->pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661} - [net] fix struct pid memory leak (Jay Shin) [1901797 ��3��j��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) ] - [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532} - [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819] - [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819] �b��l��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.17.1.el7]`��- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036] - [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147] - [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896] - [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896] - [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540] - [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540] - [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172] � � �4��m��c�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.18.1.el7]`��- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504] - [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374} - [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264] - [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645} - [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351} 1 1 �J��n���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.19.1.el7]`"y@- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589] - [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817] - [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211} - [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705} 1 1 �J��o���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.20.1.el7]`.V�- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372] - [md] improve variable names in md_flush_request() (Xiao Ni) [1889372] - [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011] - [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669] - [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669] - [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407] - [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053} func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273] - [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187] - [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187] - [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961] - [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961] - [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961] - [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064] � � ���p���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.21.1.el7]`3��- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427} - [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656} - [tty] vt: keyboard, extend � K K �/��r��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��q��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��s��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) A A �:��t��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] K K �/��v��Y�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.23.1.el7]`S@�- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652] - net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691] - net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]�|��u��s�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.22.1.el7]`KW�- mm: do not stall register_shrinker() (Rafael Aquini) [1926043] - sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082] - sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082] - sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082] - sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082] - mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916] - tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804] H H �3��w��a�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.24.1.el7]`\{@- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364} - redhat: add CI file for kernel-private (Bruno Meneguele) 4 A 4 ���y�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.26.1.el7]`~�@- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091] - md: fix md io stats accounting broken (Ming Lei) [1927106] - redhat: Fix realtime_check for -private (Juri Lelli)�:��x��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.25.1.el7]`u��- redhat: Enable CKI RT verification for kernel-private (Juri Lelli) - redhat: Enable CKI RT verification (Juri Lelli) - RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460] - net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682] - floppy: check_events callback should not return a negative number (Jay Shin) [1928576] - floppy: fix lock_fdc() signal handling (Jay Shin) [1928576] - ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700] - virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319] / �/ ���{�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]�@��z��{�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.27.1.el7]`�N@- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841] - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841] - redhat: Add git suffix to realtime_check merge_tree (Juri Lelli) = = �>��|��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � ���}��#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M��~���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] t t ����� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.28.1.el7]`�7@- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003] - ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174] - netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171] - sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184] = = �>�� ��w�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.29.1.el7]`��@- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362} - sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763] - x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531] - x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531] - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531] - hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268] - scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268] � � �����#�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.30.1.el7]`���- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170} - bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170} - netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274] - block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596] - mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451] - vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648} . . �M�����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.31.1.el7]`�8@- mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Philipp Rudo) [1917840] - scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945] - futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347} - futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347} - scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784] - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839] - net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329] - net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329] messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + �����'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H���� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]�����}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] , � , �����-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.2.el7]`�A- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]�1����]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) messages with link address (Hangbin Liu) [1958339] - hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075] - Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793] - rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688] - sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934} - sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934} - [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395] - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237] - VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237] + ��� ��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.33.1.el7]`�9@- CI: Disable result checking for realtime check (Veronika Kabatova) - CI: Explicitly disable result checking for private CI (Veronika Kabatova) - CI: Rename variable (Veronika Kabatova) - mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719] - sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052] - media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}�H�� �� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.32.1.el7]`��@- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034} - net: ipv4: route: Fix sending IGMP � S z S �"�� ��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]��� ��}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943] � � �1�� ��]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � �����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ������Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] � \ � �����}�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.34.1.el7]`��- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495] - video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803] - Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803] - blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825] - s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943] - s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]� ����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � �"����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.35.1.el7]`� @- CI: Merge configuration (Veronika Kabatova) - [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663] - [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663] � � �1����]�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.36.1.el7]`�@- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720] - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406] - sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221] - sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221] - vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778] - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778] - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778] - vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778] - redhat: genspec: generate changelog entries since last release (Augusto Caringi) � � � �����Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ������Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2����_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]�����'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � �� ��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"����?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ����9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] � � � �� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.37.1.el7]`��- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457] - net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196] - bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154} - mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794] - mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794] � � ��� ���Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.38.1.el7]`�]�- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251] - memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810] - netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650} - netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970] - netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970] . � . �2�� ��_�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.40.1.el7]a �- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777} - powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777} - IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]��� ��'�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.39.1.el7]aF�- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555} - Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744] - futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856] - xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551] - scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576] \� � ��#��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��"��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]� ��!��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449] 2 2 �I��$�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���%�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � n n � ��'��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.41.1.el7]aS@- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]�i��&��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � Y� � ��)��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.2.el7]a.�- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]�"��(��?�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.42.1.el7]a'�@- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418] - [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418] - [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418] 2 2 �I��*�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.43.1.el7]a;H�- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128] - PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128] - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128] - i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850] - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850] - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850] - i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850] - scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479] - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544] - NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649] 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���+�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i��,��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��-��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��.��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��0��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��/��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] e �r+��V��: � � e D�l � 2b66b267a753255256f090bf87977338168b89d26c4ffd982c87cd2f91b93577D�k � f7211e59a025b27356cfb06417188c0dd5e275b865c332da16611d69cbc3addbD�j � 256f88bd5667a9d5534690123098dcb92c0e72a1a20c14cfc7fc6f93d1c33891D�i � 94a821399c6834a9613024e8e79095fed47945651c6f3043fb698f645b47ea98D�h � 46160c3e8468e10ca76482b787522ad64e1f769900fb6947b4bc6690893303cbD�g � b3e690b11cafa64b176ad1733771549c822362e0515190949a20dd95d397be58D�f � 3c1b09a234b987d0d6b7eeda50bfd65fdd56ba1cd18a3d7bfaf6c502e6a18295D�e � ba86ad50d0caa853696fbf8bb669856b215fcf866bddf9a40a79e2097b6bdac7D�d � b045612fcdf478362a31afe42cbcbfa3696fd627cd7125c30615831a7f9c7831D�c � ba701cb5769f4b33298d989a3a2f322062b88774a949cc71f4d59c46e785f253D�b � 7359842aed62ed18b7e387856697f0a6cf8b16b27c7c68064ba6567b32c76b6bD�a � b96b6f75231c9bd50c073462605d9aa5494f79623d07db42df2d505c858be737D�` � 48050d32a9ddb2c79d03c638c04cd306724f7ac310231a77812108d47d170a94 78] - DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878] - DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878] - DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878] - DLM: close othercon at send/receive error (Bob Peterson) [1834878] - DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878] - DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878] - DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878] - DLM: fix double list_del() (Bob Peterson) [1834878] - DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878] - KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511] - vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618] - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576} m m ���1�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.44.1.el7]aHw�- fs: dlm: change handling of reconnects (Bob Peterson) [1834878] - DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878] - DLM: fix to reschedule rwork (Bob Peterson) [1834878] - DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878] - DLM: fix overflow dlm_cb_seq (Bob Peterson) [18348 � �i��2��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.45.1.el7]aM��- CI: handle RT branches in a single config (Veronika Kabatova) - CI: Drop private CI config (Veronika Kabatova) - CI: extend template use (Veronika Kabatova) - mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973] - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656} - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856] - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653} - scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702] � � �_��3��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.46.1.el7]a^�@- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385} - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385} - nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610] - nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610] - nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610] D D �7��4��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.47.1.el7]ay?@- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961] - PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961] - PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961] - scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599] � �!��6��A�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.49.1.el7]a�b�- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]�7��5��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.48.1.el7]a�y�- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766] - scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627] - scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627] p ep �p��8��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]���7��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739} !� ���;��+�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.50.1.el7]a�@@- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665] - scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536] - pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272] - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}�n��:��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��9��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] � , � �n��>��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig �Z��=��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.52.1.el7]a��@- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588] - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218] - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218] - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246] - i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]�p��<��_�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.51.1.el7]a�)@- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857] - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932] �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��@���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ���?��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���B�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��A��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} " �Q�" ���Fs�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Es�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]�%��D��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��C���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} � � � �F��Hs��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]�j��Gs�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840] � � ���I��+�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.1.1.el7]_R,@- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751] - [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324] � � �P��K�� �Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.3.1.el7]_p~�- [net] net-sysfs: Call dev_hol �^��J��9�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.2.1.el7]_h��- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276] - [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276] - [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273] - [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273] - [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101] - [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101] d always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811} - [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811} - [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950] - [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950] - [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707] - [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707] - [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765] - [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181] - [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181] " (Nilesh Javali) [1826127] - [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127] - [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443] - [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443] - [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803] - [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312] 9 � 9 �9��M��o�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.5.1.el7]_�9�- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223] - [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396] - [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331} - [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667] - [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667] - [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468] - [powerpc] pow ��t��L��e�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.4.1.el7]_{ �- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893] - [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command � erpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306] - [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306] - [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306] - [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306] 3 �3 �n��O��[�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.53.1.el7]a�*@- fuse: fix live lock in fuse_ig ��X��N��-�Augusto Caringi <acaringi@redhat.com> [3.10.0-1160.6.1.el7]_�"�- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682] - [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682] - [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682] - [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351} - [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352} bR TRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��� ��� ��� ��� ��� � Á� ā� Ł� Ɓ� ǁ� ȁ� Ɂ� ʁ� ˁ� ́� ́�# �$ Ё�% с�' ҁ�) Ӂ�* Ձ�+ ց�, ׁ�- �. ف�0 ܁�1 ݁�2 ށ�3 ߁�4 �6 ၮ8 ; 灮> 쁮@ B F �H �I �K ���M ���O ���Q ���S ��U ��V ��W ��X ��[ ��\ ��] ��^ ��a ��b ��c ��f ��g ��i ��l ��n ��r ��t ��u ��y ��z ��{ ��} �� !�� #�� $�� %�� +�� -�� .�� /�� 5�� 6�� 7�� =�� >�� ?�� @�� A�� C�� D�� E��" F��# G��% I��( J��* K��+ L��- N��1 O��3 R��7 S��; �et() (Miklos Szeredi) [1952046] - fuse: fix bad inode (Miklos Szeredi) [1952046] - GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234] - gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234] - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234] - gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234] - gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234] - gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234] - gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234] - gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234] - gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234] - gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234] - gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234] - gfs2: Withdraw in gfs2_ail1_flush �if write_cache_pages fails (Bob Peterson) [1364234] - gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234] - gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234] - gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234] - gfs2: Issue revokes more intelligently (Bob Peterson) [1364234] - gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234] - gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234] - gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234] - gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234] - gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234] - gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234] - gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234] - gfs2: log error r �eform (Bob Peterson) [1364234] - gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234] - gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234] - gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234] - gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234] - gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234] - gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234] - gfs2: Report errors before withdraw (Bob Peterson) [1364234] - gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234] - gfs2: Fix incorrect variable name (Bob Peterson) [1364234] - gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234] - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234] - gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234] - gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234] - gf s2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234] - gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234] - gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234] - gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234] - gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234] - gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234] - gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234] - gfs2: slow the deluge of io error messages (Bob Peterson) [1364234] - gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234] - GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234] - gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234] - GFS2: Use pr_<level> more consistently (Bob Peterson) [1364234] b |b � ��Q���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.55.1.el7]a�- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [203060 ����P��}�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.54.1.el7]a��- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574] - Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573} - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155} 9] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561] - efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302] - efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302] - efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302] - efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302] - efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302] - HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465} � ? � ���S�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}�<��R��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.56.1.el7]a��- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070] - af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920} - selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196] - Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564} Q �Q �%��U��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��T���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��V��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��W��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��X��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) � up � �%��[��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.59.1.el7]b �@- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]� ��Z���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.58.1.el7]b[@- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687] - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}���Y�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.57.1.el7]a�r@- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466} - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330} is set (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083} - vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083} - get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083} - fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083} - introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083} � � �\��\��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.60.1.el7]b!�- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740] - sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740] - x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462] - [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156] - CI: Enable baseline realtime checks (Veronika Kabatova) - CI: Rename pipelines to include release names (Veronika Kabatova) - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028} - fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083} - fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083} - net: Set fput_needed iff FDPUT_FPUT P P �+��]��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.61.1.el7]b%�- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587] ( ( �S��^��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��a���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��`��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���_�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��b���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] ( ( �S��c��%�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.62.1.el7]b; �- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304] - redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756] - [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920] - dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743] - buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609] - buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609] - buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609] - mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345] - mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345] - Added ZSTREAM=yes to makefile (Lucas Zampieri) p �B p �M��f���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.65.1.el7]bV�@- CI: Remove deprecated option (Veronika Kabatova) - RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]�%��e��I�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.64.1.el7]bM��- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}���d�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.63.1.el7]bDF@- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699] - SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699] - SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699] - SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699] - kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502] 7 7 �D��g���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.66.1.el7]bi0@- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457] - CI: Drop baseline runs (Veronika Kabatova) - perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317] - perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317] - perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317] % v % �L��i���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���h�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � ��l���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���k��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���j��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] % v % �L��n���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.68.1.el7]b�k�- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025] - xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464] - sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]���m�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.67.1.el7]b��@- mm/rmap.c: explicitly reset vma->anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962] - mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962] - mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962] - mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962] - mm/mmap.c: prev could be retrieved from vma->vm_prev (Rafael Aquini) [1824109 2069962] � d�� � �&��r��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��q���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]���p��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.70.1.el7]b�x@- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]���o��-�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.69.1.el7]b��@- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564] x x ���t��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l��s��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��u��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for 3 ^O$ 3 �l��y��W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&��x��K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]� ��w���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.71.1.el7]b��- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966} - netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]� ��v��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] i i ���z��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T��{��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for G ^ G ���}��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ��|��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 �+��~��U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 ] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} M ��M �����#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�l����W�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.73.1.el7]b��- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646] - RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]�&����K�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.72.1.el7]b��@- sched,perf: Fix periodic timers (Valentin Schneider) [2077346] - sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346] - sched: Cleanup bandwidth timers (Valentin Schneider) [2077346] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T����'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for " G ^ G �����#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� ����9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 &�+����U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} ' CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV (E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 )CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 *] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � ��� ��#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.74.1.el7]bγ�- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]�L�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970] � � �T�� ��'�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.75.1.el7]b֜�- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360] - x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166} - cpu/speculation: Add prototype for , G ^ G �����#�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.77.1.el7]c�@- net/mlx5: Add Fast teardown support (Jay Shin) [2077711] - net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711] - net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711] - net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711] - net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711] - net/mlx5: Expose command polling interface (Jay Shin) [2077711] - posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147] - posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147] - posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]� �� ��9�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.76.1.el7]b��@- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280] � P( � �B�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]� �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 0�+����U�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.78.1.el7]c#�- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588} 1 CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV 2E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 3CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 4] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} � � �L�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145] & & �U����)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � � �����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.79.1.el7]c,N@- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373} - x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 8����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} 9 CVE-2022-29900 CVE-2022-29901} - x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CV :E-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 ;CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Undo return-thunk damage (Rafael Aquini) [2090227 <] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} - x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901} h �h �L�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�B�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.80.1.el7]cAf@- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988] - scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988] - NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856] & & �U����)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i����Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]����� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@�����Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7�� ��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc B��� ��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} w �w �L�� ���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.81.1.el7]c\�- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869] - [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869] - [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]�3�� ��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] & & �U�� ��)�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.82.1.el7]c��- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] � � � �i��"��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���!�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��#���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��%��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc H���$��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} E �)E �_��(��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���'��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��&��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] � � � �i��*��Q�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.84.1.el7]c��@- blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]���)�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.83.1.el7]c�R@- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} ; ; �@��+���Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.85.1.el7]c�0�- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] � b � �7��-��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc M���,��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � �)E � � ��1��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]�_��0��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���/��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��.��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] W � W ���3��1�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.86.1.el7]cۥ�- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]���2�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556] e �r+��V��: � � e D�y � 1e71ddbce6e19382bbeabad1c266e4c7cb09e2a56d99175af4ac9ac047af3945D�x � 20135be9052bd1b2d8da133fe7cc987b80d4dc2685146012968f6b8e78e0bfe9D�w � 9bfce694395b42428b130fade4131953efe8248a166cb9df74a2681d8de08ecbD�v � 49aab94d53d2b184f6a56304123436d4e5036e2f12df6e2e89bef3f8e09e48c5D�u � f08e9ea6985102fff682040f9282a64d08ae60b52a53ac25a2ae2d14b381049eD�t � 3594f2b7367495aba0e2ad40d7aeabb3ec7bcd176bfa09127a9021573f936f66D�s � 93e83a7482939b72a1377200f3ba36de2f5a593ed72db969095bca9b712022f4D�r � b46ce984b02b31bec731f80328c745600ec4e07a5c031e77dbb554e88ba7fcbbD�q � e855f087b1b23b7efc6503e87350c4cca1ef6881dc97c31f1512bcda747a478bD�p � 4de0f5c0f1ddd055c4b4b2635e35081b0a75f314bbe5cb8978790bfc21cebbc8D�o � 44c119ffc1f4001f24a6905dc7a8b1db1b192babbc6e3390b81e54adfb63b7b8D�n � e161fe668a338dbcc5fd4207138cf06b234756554c7b000fd5627366c98b5f3aD�m � c09c4232be25f378a871198874931161c40b1ce864dffbd95137c1d37205669c h: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} � <e � �_��7��=�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.90.1.el7]dV@- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]���6��3�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.89.1.el7]c�U@- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}�3��5��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.88.1.el7]c�- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]�7��4��m�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.87.1.el7]c�1�- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert "openvswitc Q � _TH � �<��;��w�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.94.1.el7]d�@- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}���:�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.93.1.el7]d}�@- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]���9�� �Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.92.1.el7]df@- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642] - x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]� ��8��7�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.91.1.el7]dBz�- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931] � H2 � ���>s��Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]^�- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Drono V� ��=s�!�Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]^�W@- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064] - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528] - [hid] HID: hiddev: do clean U�3��<��e�Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-1160.95.1.el7]d��@- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] up in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527} - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527} - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864] - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620] - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106] - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799] - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356] - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356] - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379] - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770} - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732} Wv) [1844409] - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409] - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409] - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326] - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549] - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549] - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Follow correct remov e sequence (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549] - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549] - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549] - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549] - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549] - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698] - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370] - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370] - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617] A � A � ��@s��Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]^��@- [fs] gfs2: move privileged user check Y�J��?s�#�Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]^�4�- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757} - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654} - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653} - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428] to gfs2_quota_lock_check (Robert S Peterson) [1798713] - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713] - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713] - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713] - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713] - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713] - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713] - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713] - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713] - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713] - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558] C C �D��Bs��Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]_X@- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713] - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799] - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799] - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}�o��As�m�Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]_�- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576] - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576] - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430] - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114] - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852] b g�b �j��Es�c�Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]_+�- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840] - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]���Ds�1�Jan Stancek <jstancek@redhat.com> [3.10.0-1158.el7]_A@- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []���Cs�7�Jan Stancek <jstancek@redhat.com> [3.10.0-1157.el7]_�- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166] � 5� � }��Ii��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��Hi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN�0��Gi�y�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]�@�- module-setup: re-fix 99kdumpbase network dependency - kdumpctl: bail out immediately if host key verification failed�F��Fs��Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]_;�- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857] - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857] - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857] - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857] � a�� � ~��Oi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��Ni��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��Mi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��Li�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��Ki�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���Ji�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel � t�{�; � �,��Ui�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��Ti�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���Si�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��Ri��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��Qi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN���Pm�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working V { ~�v � V ���\i�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��[i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during sshx��Za��Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���Ym�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��Xi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��Wi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��Vi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes(). $ _�)�, � $ x��ca��Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���bm�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��ai��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��`i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��_i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��^i�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��]i�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems. � ��c�C � � ��ii�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���hi�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��gi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��fi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN�0��ei�y�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]�@�- module-setup: re-fix 99kdumpbase network dependency - kdumpctl: bail out immediately if host key verification failedl��da{�Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`�e@- Throttle kdump reload request triggered by udev event H O�O�A � H }��pi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��oi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN���nm�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��mi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��li��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��ki��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��ji�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias() � a�� � ~��vi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��ui��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��ti��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��si�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��ri�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���qi�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel � t�w�7 � �,��|i�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��{i�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���zi�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��yi��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during sshx��xa��Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���wm�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working Q { ~�v Q �0��i�y�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43]�@�- module-setup: re-fix 99kdumpbase network dependency - kdumpctl: bail out immediately if host key verification failedl��a{�Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`�e@- Throttle kdump reload request triggered by udev eventx��a��Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()��� m�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��~i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��}i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes(). �h� � w�� i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� �� i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��i�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��i�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���i�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN � ~�z�Z � � ��i�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���i�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel}��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during ssht�� i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-44^f/�- module-setup: Ensure eth devices get IP address for VLAN��� m�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~�� i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rules D O�O�A � D }��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-45^r @- mkdumprd: Use DUMP_TARGET which printing error message during sshx��a��Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()���m�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working~��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��i�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias() � a�� � ~�� i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51^�- Add a new option 'rd.znet_ifname' in order to use it in udev rulesw�� i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-50^�V@- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel� ��i��Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-49^���- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().�,��i�q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48^�_�- dracut-module-setup.sh: ensure cluster info is ready before query. - dracut-module-setup.sh: improve get_alias()� ��i�Q�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-47^|�@- mkdumprd: don't append noauto to mount option. - Add NOTE about nr_cpus value on HyperV systems.���i�M�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-46^x��- Always drop nofail or nobootwait options - Always set vm.zone_reclaim_mode = 3 in kdump kernel � t��&F � ���#g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��"g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��!gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129l�� a{�Pingfan Liu <piliu@redhat.com> 2.0.15-51.3`�e@- Throttle kdump reload request triggered by udev eventx�� a��Pingfan Liu <piliu@redhat.com> 2.0.15-51.2`B @- kdumpctl: fix a variable expansion in check_fence_kdump_config()��� m�#�Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-51.1_V �- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working ^ 0� W ^ �t��(i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��'i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���&i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���%i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��$i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441 ; m��� ; �K��.i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���-g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��,g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��+gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���*i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���)i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401 � y�'. � ���3i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��2i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��1i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���0i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���/i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560 G x6� � G ���9i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��8i�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���7g�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��6g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��5gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���4i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159 e �r+��V��: � � e D� � 6f455484f1eb5f3b6fb66db239a002b80058c5b1b96396b1f9845be413af51dfD� � f136bc0eecf5d5320db54998eac1c4599ab87a312d5ce7a2cefc841ab054b1eaD� � 7bddd4fb53bfa9c6ecfb51584e6173525154d1432fdd23c18162b8a5428fd9c2D� � ebe9101eafa195e97d5191257396d826d54a03212851b56130c2502068cb8f4cD� � 0e46815b96448a8115c16703aeaeadf07680cb2172f0028f3a8ab4b9d6e6897dD� � 1e050a70197e546f07c1f78ed2e33fa01d93756947ab17d6c3343eaf08eb2702D� � 14290884418bd83ad4955aa6354b2113950b766239244a06bee2f2a364ba608fD� � f901d903838a840af4b07b7405171f08944a919391efff75f782b9d2c5a6a8a7D�~ � ca22627ed1921f923bf0d6590573bb115ae89ab16f2cd8439ca78680ac859464D�} � 3db947e6e862b89a0ca5b23880b8c910b68d3c16831d17f914d62706e4e337dbD�| � f6eec5c1e694fd7e8232482c537de9cd0baf38de7afc7c99fee2ddf4b248488dD�{ � 8d2234f4b3652ffa6caf553d843f040d43d53c10ec6156b8de9fbd3efb4aef2cD�z � 6a2fc5bcfdf2c8ed011976da11bfa2c4e64084e1f45d265f784bcd58fbece989 8 `��" � 8 ^��?gY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���>i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���=i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��<i��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��;i�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���:i�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560 � ��1 � ���Di�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Ci� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Bi�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Ag�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��@g�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��IgY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Hi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Gi�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Fi��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��Ei�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���Ni�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Mi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Li�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Kg�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��Jg�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 � NU�: � ^��SgY�Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Ri� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Qi�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Pi��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��Oi�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � ��1 � ���Xi�O�Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Wi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Vi�/�Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Ug�A�Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��Tg�Q�Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 NU�: � ��]q�K�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651���\i� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���[i�5�Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Zi��Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��Yi�s�Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 � c� � ��_q�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556���^q�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 L L �/��`q�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��cq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��bq�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��aq�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 +>� ���gq�A�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}��fq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��eq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��dq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��hq�'�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��iq�o�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��lq�q�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��kq�}�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��jq�s�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 " +>�" ���pq�=�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��oq� �Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��nq�a�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��mq�1�Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��qq�' Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��rq�o Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��uq�q Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��tq�} Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��sq�s Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 +>�" � |��{m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726���zq� Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���yq�= Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��xq� Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��wq�a Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��vq�1 Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � ��v � � ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o�� mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��~m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���}m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��|m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927 � }�x�n � � e�� ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ X��@ Z��B [��E \��I ]��O ^��U _��\ `��c a��i b��p c��v d��| e�� f�� g�� h�� i�� j��# k��( l��. m��3 n��9 p��? q��D r��I s��N t��S u��X v��] w��_ x��` y��c z��g {��h |��i }��l ~��p ��q ���r ���u ���{ ��� ��� ��� ��� ��� ���% ���, ���3 ���: ���A ���H ���O ���V ���] ���d ���k ���r ���y ��� ��� ��� ��� ��� ���# ���* ���1 ���8 ���? ���F ���M ���T ���[ ���b ���i ���p ���w ���~ ��� ��� ��� ��� ���! ���( ���/ ���6 ���< ���B ���I ���P ���U ���Z ���_ ���d ���i ���n ���s ���x r ��| � r ���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o�� mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126 � �� � � � ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506 { g�]�t { ��� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o�� mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e�� ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927���m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 � }�u�\ � � o��%mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��$ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��#m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���"m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��!m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 9 z�t�V � 9 ���,i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���+i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���*m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��)m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��(m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��'m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���&m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 � �� � � � ��3m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��2m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��1m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���0m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��/mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��.ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��-m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506 e g�J�n � e ��:m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���9m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��8mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��7ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���6i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���5i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���4m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 e �r+��V��: � � e D� � 79effda42d229dffeed9ec2dc1067ea15c3d1895c9bdfe9d24064abaa134d7a7D� � 82f169e42c36e9579026a6d56d46f2cbe59221a611192fe96b613ff527e57a1cD� � 8c1afba082bedaba9392d11b613759a65431711c73e71af2ca4c1d2710b71ac5D� � 0b514834510f57ab09a2051d0b0c2be8a61777452ad125d1b3e5e90abeb6fa22D� � f7291bdf6020187d7cf5369c95f16faeef861f866ffc8c46c03116ea2adf9092D� � 617fff79ce97ec5ee66c7f45cec546ea2429f9ce776263cf40a0b246665913e1D� � cf61322c3e87c6c21ad8be1051fa2d235337e2a97a9a894828a70e5cd12a2254D� � 03cf1dde125c19d5d48038e69f3552a4973548aa09dc383debd850eec84fa1a4D� � 56773da33ba948469db1f7ab9d9bc267d2e29b3458b2d1376573c09525ad4581D� � f89d39e2f15a5f9de6ac154edd1ca68886b384c0e12ef5657eb722c92e9c0788D� � 789245b54d2cc37181b3209ca55431722601a4544e987a98c0953c1b64660406D� � b3cdcec7059a05b036622e2b2326259602d28b19672e0fe8766f1b0c59537bc9D� � fbc2fabe0f2dd520e1af93518f0669fbb0c91b469d7508a7402404cbbea73b6d J }�_�B � J e��Ama Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726� ��@i�- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���?i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���>i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���=m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��<m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��;m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 M ��| � M ���Hi�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���Gm�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��Fm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Em� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Dm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Cm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Bmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126 w y�j�` � w e��Oma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Nm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Mm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Lm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��Km� Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��Ji�- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���Ii� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163 | ��| � | |��Vm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��Um� Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��Tm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Sm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Rm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Qm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Pmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126 � v��� � ��]m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��\m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���[m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Zmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Yma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Xm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Wm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347 � {�q�� � ���dm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��cmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��bma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��am� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���`m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��_m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��^m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 R }�u�\ � R |��km� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���jm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��im� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927���hm�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��gm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��fm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��em� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 z �$�� z ���rm�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��qm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��pm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��om� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���nm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��lma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726 � �� � � � ��ym� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��xm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��wm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���vm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��umu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��tma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��sm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506 h g�J�a � h ��� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��~ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��}m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���|i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���{i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���zm�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 V }�u�F � V e��ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 M ��| � M ���i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319��� m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� �� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126 � y��� � ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726� ��i�- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163 6 {�L�6 � 6 |�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��i�- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 � v��� � ��#m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��"m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���!m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o�� mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e�� ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506��� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347 � {�q�� � ���*m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��)mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��(ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��'m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���&m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��%m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��$m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 � }�u�\ � � o��1mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��0ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��/m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���.m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��-m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��,m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��+m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 9 z�t�V � 9 ���8i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���7i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���6m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��5m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��4m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��3m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���2m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 e �r+��V��: � � e D� � caf7f0adf042b63657e0610f87dbb3aa3334f9a81292aa836ddc648117954f9dD� � 81bcb4324bc25258c6e46c0bdc146842422c22344fda2af0164660b98db7c0dcD� � 249e4941a5a5071a668ba290a7dc5e28013fd43206a9a9b2a2a236220aee04ddD� � 8398bd6b079096f5128dc71162f6fb902418319a1f157c08cd55e55ea7b42815D� � 9f8bb077bbb9a1599bd7dfb6b7973517ca6a23674134edc3822c31d459a0fcf0D� � ea48b9fb3553584f758b7a3b5b3689740e4d04e82eb6d0359b8fecbde72b9b23D� � 87aee3a9528b247730a778c50eab6e97da58d331049a063fa5f651d993db29d5D� � 63c82c1e8917281adf931c995b90cce5c368fb95285f2659b691785c1fdd6a86D� � 2da57e3f11f7feb8e50c18578d16794bb2a9a020b5c7c2a5ed12d4c49a0e597dD� � 180fe822e8d8229970daac8f8d746b4a0b83877121f93490003022ee941544c1D� � 9d8090a78aa40baa54d3800a01ae8e374a61c7be5587eb90bc2cf279a1c29e2eD� � 196df95b9b19a08f79321b9b3709379e9fbdf71dd5cdc4d74bd313d84468f412D� � b64165d72cf869748c81b8e41581c93b8354747c22d548ae910ab54e118a90a5 z �$�� z ���?m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��>m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��=m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��<m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���;m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��:mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��9ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726 J j�T�T � J |��Fm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Em� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Dm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��Cm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��Bi�- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���Ai� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���@i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319 � �$�� � |��Mm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��Lm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Km� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Jm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Im� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Hmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Gma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726 � v��� � ��Tm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Sm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Rm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Qmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Pma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Om� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Nm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347 } {�b�� } ��[m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Zm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Ymu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Xma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��Wm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���Vm�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��Um� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 f }�_�B � f o��bmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��ama Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���`i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���_i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���^m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��]m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��\m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 9 z�t�V � 9 ���ii� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���hi�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���gm�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��fm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��em� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��dm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���cm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 � q�q�g � � o��pmu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��oma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��nm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���mm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��lm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��km� Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��ji�- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961 e z�t�o � e |��wm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���vm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��um� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��tm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��sm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��rm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���qm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 z �$�� z ���~m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��}m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��|m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��{m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���zm� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��ymu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��xma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726 � �� � � � ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e�� ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506 e g�J�n � e �� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o�� mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e�� ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 3 }�_�B � 3 |��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��i�- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 � ��v � � ��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927 � }�x�n � o��!mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e�� ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506��� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|�� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� �� m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 m z�t�V � m e��(ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��'m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���&m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��%m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��$m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��#m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���"m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 M ��| � M ���/i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���.m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��-m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��,m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��+m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���*m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��)mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126 � y�� � � ��6m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��5m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��4m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���3m� Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��2mu Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��1ma Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726���0i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163 � g�J�: � � ��<{�C !Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36Y��- Fix setting terminal foreground process group while resuming process Resolves: #1457990}��;{� !Siteshwar Vashisht <svashisht@redhat.com> - 20120801-35Y��- Fix warning while creating kia file Resolves: #1438045� ��:i�- Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961���9i� Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���8i�; Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���7m�= Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599 e �r+��V��: � � e D�- � e377bae670c12638d474197ef518748c1e088342df7e30d7b48305b688397f86D�, � cadd165d38724eb665db004d9c8b750aecb7c5d88cafaecac40cf6bd136bc3b9D�+ � 61f2ce61f188dc44b4bac40752a37aceb51e5ab3ad31e9832585553728f1153aD�* � 5475ede3cff8776a20cbf47c4b3c85074267733ee7b25756385442d60aa680c8D�) � 350bcc459207279a04b2e6c772304349c7c5d63b58f4b52efe0c5856681203c4D�( � d83df69f3f8696e0c3baee4eb2d4a692612706bad980d06d71759195aefe28a4D�' � f51bb9d1fa63c5bb467fc5024de79c68a580bffb93e0ee00dad4ffd1edfb0dc6D�& � 6e73c8cf692c96778253ff1dcfb1fa2fbff0c5bd4b3bb64b10dd7cc1b5edc4acD�% � 3bba9df9a126294f1b6d125afef0399b652648e92446de453d3f9aa966726dc7D�$ � 8717e76e453ff6da56721f14fb3f66a602f200c27eb0d7730ad11ad9f0e696c4D�# � 7f527d338cce3e1cb86323b7257ae02c7e130d6c37bc6ff07f75a20ad82a2e25D�" � 86b8329276455f1ab7137f0bfbed2c18288a75bb75932393695583ae82613063D�! � 09c46bafc8f7871f9037631642128c520e108bc7b90ffdfffbd477c7ea27543e � T�+�0 � �'��B}�S !Siteshwar Vashisht <svashisht@redhat.com> - 20120801-141^0"@- Do not evaluate arithmetic expressions from environment variables at startup Resolves: #1790544{��A}} !Siteshwar Vashisht <svashisht@redhat.com> - 20120801-140]S��- Add virtual provides for /bin/ksh Resolves: #1690042x��@}w !Siteshwar Vashisht <svashisht@redhat.com> - 20120801-139[ �@- Fix a crash caused by memcmp() Resolves: #1546749���?}� !Siteshwar Vashisht <svashisht@redhat.com> - 20120801-138[@- Fix a crash due to out of bounds write Resolves: #1506347� ��>i�U !Kamil Dudka <kdudka@redhat.com> - 20120801-137Z��- Increase the release number by 100 to make sure it stays higher than in RHEL-6 Related: #1484937�'��={�U !Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37Zhu@- Add configuration option to enable signal bubbling for backward compatibility Resolves: #1484937 * � {�, � * x��I}w "Siteshwar Vashisht <svashisht@redhat.com> - 20120801-139[ �@- Fix a crash caused by memcmp() Resolves: #1546749���H}� "Siteshwar Vashisht <svashisht@redhat.com> - 20120801-138[@- Fix a crash due to out of bounds write Resolves: #1506347� ��Gi�U "Kamil Dudka <kdudka@redhat.com> - 20120801-137Z��- Increase the release number by 100 to make sure it stays higher than in RHEL-6 Related: #1484937�'��F{�U "Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37Zhu@- Add configuration option to enable signal bubbling for backward compatibility Resolves: #1484937� ��E{�C "Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36Y��- Fix setting terminal foreground process group while resuming process Resolves: #1457990n��D{e !Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-143aV�@- Stack robustness fixes Related: #2007364l��C}_ !Siteshwar Vashisht <svashisht@redhat.com> - 20120801-142^J�@- Bump version number Related: #1790544 3 ��e�u 3 �[��Pg�Q #Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��OgY #Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129z��N{} "Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-144b �- Stack robustness additional fixes Resolves: #2053503n��M{e "Vincent Mihalkovic <vmihalko@redhat.com> - 20120801-143aV�@- Stack robustness fixes Related: #2007364l��L}_ "Siteshwar Vashisht <svashisht@redhat.com> - 20120801-142^J�@- Bump version number Related: #1790544�'��K}�S "Siteshwar Vashisht <svashisht@redhat.com> - 20120801-141^0"@- Do not evaluate arithmetic expressions from environment variables at startup Resolves: #1790544{��J}} "Siteshwar Vashisht <svashisht@redhat.com> - 20120801-140]S��- Add virtual provides for /bin/ksh Resolves: #1690042 � h�q � �-��Ui�s #Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���Ti�O #Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���Si� #Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��Ri�/ #Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���Qg�A #Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��Zg�Q $Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��YgY $Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���Xi� #Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���Wi�5 #Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��Vi� #Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��_i�s $Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���^i�O $Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���]i� $Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��\i�/ $Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���[g�A $Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��dg�Q %Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��cgY %Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���bi� $Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���ai�5 $Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��`i� $Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��ii�s %Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���hi�O %Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���gi� %Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��fi�/ %Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���eg�A %Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��ng�Q &Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��mgY &Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���li� %Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���ki�5 %Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��ji� %Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��si�s &Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���ri�O &Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���qi� &Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��pi�/ &Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���og�A &Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��xg�Q 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��wgY 'Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���vi� &Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���ui�5 &Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��ti� &Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��}i�s 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���|i�O 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���{i� 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��zi�/ 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���yg�A 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��g�Q (Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��gY (Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129��� i� 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��~i� 'Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��i�s (Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���i�O (Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� (Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��i�/ (Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A (Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[�� g�Q )Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^�� gY )Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129��� i� (Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159��� i�5 (Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i� (Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��i�s )Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���i�O )Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� )Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��i�/ )Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441��� g�A )Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��g�Q *Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��gY *Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���i� )Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���i�5 )Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��i� )Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��i�s *Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���i�O *Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���i� *Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��i�/ *Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���g�A *Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[�� g�Q +Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^�� gY +Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129��� i� *Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159��� i�5 *Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t�� i� *Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��%i�s +Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���$i�O +Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���#i� +Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��"i�/ +Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���!g�A +Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 � t�� � �[��*g�Q ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��)gY ,Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���(i� +Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���'i�5 +Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��&i� +Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 � h�q � �-��/i�s ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���.i�O ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���-i� ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��,i�/ ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���+g�A ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002 # t�( � # d��5ak -John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���4a�Q -John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342�?��3a� -John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989���2i� ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���1i�5 ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��0i� ,Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048 M s�M �5��8c� -Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��7c�m -Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response���6a�1 -John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patch � I� � �q��;c� -Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;��:c� -Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�2��9c� -Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors � F�A � ���@a�1 .John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patchd��?ak .John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���>a�Q .John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342�?��=a� .John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989�q��<c� -Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses e �r+��V��: � � e D�: � c5210f6bcc42e5949db2d2f133a369159d73a960cf7abe1a47a4248fe1d48491D�9 � 9d8f852847d542b8ca3a8f7afddddd363dfd43bfa65cfbf6dfc8aa04498417daD�8 � c053243ee1cb35d96150add59e7a1c0861276f5b2a3a9ca734501801a605c029D�7 � fdbe2525e655b8cf975f2027191bcc9231946f75aa3196dd6bc68d144b98da20D�6 � a95d1f4bc03b57d5bf45411152deb77c11b8f7e7eea468e1ac9786e41c70b339D�5 � 2a27d4cd848272f9c9e4251b28efc591660799054bcd62d321892c0a8a608f9dD�4 � 232113158f29ca0be28b87fea599e2ceb671ea597d510b952fa9490d78950783D�3 � e08f5391f6f27a9c77207532b12000e6771dbbab3411de893ea6640343d7c557D�2 � 67364ca692de365478eee5a94879717c1fae2b7a4ba46d128ec04f0477c8c2b5D�1 � 0ff1974a6100b7f2cbd7eed090daafd948fcf3710a299e3b612fb23e609059deD�0 � 82146c665ec6adb6b5a44f5163ac78834431f9d37ddbeee4cc990634d979481bD�/ � 41389a794b7cc04dd2e3fd21ff891d278296ee4aefdfda8491c6075a8b52e2d7D�. � dc77ee42e3378dfc1bde015704e9af335bd8e6829d547325da2fc62adc0db229 # � # �2��Cc� .Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�5��Bc� .Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��Ac�m .Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response � @JT � �?��Ga� /John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989�q��Fc� .Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�q��Ec� .Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;��Dc� .Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses H c�n� H �5��Lc� /Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��Kc�m /Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response���Ja�1 /John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patchd��Iak /John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���Ha�Q /John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342 � I� � �q��Oc� /Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;��Nc� /Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�2��Mc� /Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors � F�A � ���Ta�1 0John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patchd��Sak 0John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���Ra�Q 0John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342�?��Qa� 0John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989�q��Pc� /Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses # � # �2��Wc� 0Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�5��Vc� 0Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��Uc�m 0Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response � @JT � �?��[a� 1John Dennis <jdennis@redhat.com> - 2.4.1-8U�@- Add explicit minimum dependency on glib2 2.42, for some reason RPM is not automatically detecting the dependency Resolves: #1254989�q��Zc� 0Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�q��Yc� 0Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;��Xc� 0Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses H c�n� H �5��`c� 1Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4]6��- Resolves: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors�g��_c�m 1Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3\`@- Resolves: #1634267 - ECP signature check fails with LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed instead of response���^a�1 1John Dennis <jdennis@redhat.com> - 2.5.1-2Wc�@- Rebase to upstream 2.5.1 Resolves: #1310860 - add validate_idp_list_test patchd��]ak 1John Dennis <jdennis@redhat.com> - 2.5.1-1WYZ@- Rebase to upstream 2.5.1 Resolves: #1310860���\a�Q 1John Dennis <jdennis@redhat.com> - 2.5.0-1U�6@- Rebase to upstream, now includes our ECP patches, no need to patch any more Resolves: #1205342 � I� � �q��cc� 1Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�;��bc� 1Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6`�r�- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses�2��ac� 1Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5]Ik�- Resolves: #1719014 - Expired certificate prevents tests from running - Actually apply the patch file for the previous build - Related: #1730009 - lasso includes "Destination" attribute in SAML AuthnRequest populated with SP AssertionConsumerServiceURL when ECP workflow is used which leads to IdP-side errors A � b � A v��ic� 2Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"��hc�c 2Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x�#��ge�c 2Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.xr��fe� 2Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���ee�' 2Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691�q��dc� 1Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-8`�r�- Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses 8 � ��8 p��oi{ 3Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ�@- Fix option xfer:auto-rename not documented (#1035229)`��ne_ 2Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277z��mc� 2Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz��lc� 2Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav��kc� 2Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��jc� 2Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase H �4� H �N��t?�_ 3Michal Ruprich - 4.4.8-10X)�@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp - Patch edited so that it corresponds to upstream� ��s=�W 3Michal Ruprich - 4.4.8-9X l�- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp���rk�# 3Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror���qk�% 3Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~�@- Fixed issue with absolute URL locations in mirror mode - Related: #1181580�;��pk� 3Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<�- Fix lftp does not follow http redirect (302) in mirror mode (#1181580) - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984) - Added RFE - lftp configurations for restricting each SSL/TLS version (#1182987) - Fixed bogus dates of this SPEC � %p� � p��yi{ 4Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ�@- Fix option xfer:auto-rename not documented (#1035229)� ��xk�- 3Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:�- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7�;��wk� 3Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\�- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated�0��vk�w 3Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased�V��uk�C 3Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z���- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries' - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries H �4� H �N��~?�_ 4Michal Ruprich - 4.4.8-10X)�@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp - Patch edited so that it corresponds to upstream� ��}=�W 4Michal Ruprich - 4.4.8-9X l�- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp���|k�# 4Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror���{k�% 4Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~�@- Fixed issue with absolute URL locations in mirror mode - Related: #1181580�;��zk� 4Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<�- Fix lftp does not follow http redirect (302) in mirror mode (#1181580) - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984) - Added RFE - lftp configurations for restricting each SSL/TLS version (#1182987) - Fixed bogus dates of this SPEC � %p� � p��i{ 5Lubos Uhliarik <luhliari@redhat.com> - 4.4.8-5UQ�@- Fix option xfer:auto-rename not documented (#1035229)� ��k�- 4Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:�- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7�;��k� 4Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\�- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated�0�� k�w 4Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased�V��k�C 4Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z���- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries' - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries H �4� H �N��?�_ 5Michal Ruprich - 4.4.8-10X)�@- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp - Patch edited so that it corresponds to upstream� ��=�W 5Michal Ruprich - 4.4.8-9X l�- Resolves: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp���k�# 5Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-8W4p@- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror���k�% 5Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-7U~�@- Fixed issue with absolute URL locations in mirror mode - Related: #1181580�;��k� 5Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6US<�- Fix lftp does not follow http redirect (302) in mirror mode (#1181580) - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984) - Added RFE - lftp configurations for restricting each SSL/TLS version (#1182987) - Fixed bogus dates of this SPEC v %p� � v a��qU 6Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A�� ]) 6Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4� �� k�- 5Michal Ruprich <mruprich@redhat.com> - 4.4.8-14c:�- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7�;�� k� 5Michal Ruprich <mruprich@redhat.com> - 4.4.8-13^9\�- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated�0�� k�w 5Michal Ruprich <mruprich@redhat.com> - 4.4.8-12]8H@- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased�V�� k�C 5Michal Ruprich <mruprich@redhat.com> - 4.4.8-11Z���- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries' - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries P �(�p�V � � P a��qU 7Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��]) 7Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4X��iK 6Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��]w 6Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��]) 6Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��]q 6Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��qq 6Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��]) 6Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��q[ 6Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��qk 6Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 % �(�p�V � � % l��"qk 8Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��!qU 8Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()X�� iK 7Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h�� ]w 7Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA�� ]) 7Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e�� ]q 7Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo�� qq 7Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��]) 7Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��q[ 7Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��qk 7Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 ? �S�w2�j � ? l��,qk 9Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��+qU 9Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()R��*]K 8Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��)iK 8Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��(]w 8Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��']) 8Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��&]q 8Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��%qq 8Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��$]) 8Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��#q[ 8Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3 j �S�w2�j � j a��6qU :Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��5]) :Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4R��4]K 9Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��3iK 9Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��2]w 9Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��1]) 9Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��0]q 9Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��/qq 9Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��.]) 9Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��-q[ 9Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3 % �(�p�V � � % l��@qk ;Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��?qU ;Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()X��>iK :Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��=]w :Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��<]) :Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��;]q :Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��:qq :Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��9]) :Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��8q[ :Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��7qk :Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 e �r+��V��: � � e D�G � a687b481be7d8b127fe830b2c0840854683d1ac18a2c1799d5caac56e8891e8fD�F � ea09355eb6ee209c2b42e898475fc5462249ee3f27b0dd881ee2fd0db8245464D�E � 0eda90367bc11ce10165853be705e1303b3ac2a0f5072131cbd8b2ea6ed2d1eaD�D � b856dd2cc821e1fa2cbc89c6901577691af284f98280ef05cc1a7c3826acae41D�C � 938bb9ba7be38a8654b48fbbb34f5d8a3a6db6e2453cbe54b8b837c099acb52cD�B � 26dd5513dd4b2211aa6f24f32382b86bafd5ff88c0d642448cc8725093a58146D�A � de55e1ddb71f75f5b701d57786cf4b70fee1d92f72205d32c353fe0e17602361D�@ � e5f76a4c5b41b3334ed3da7aa9bf17480ddf89e174661aaa2d61a1fe4efc7ad4D�? � 938bca67aabbf5f68ed289ef571582f9e1c3c144f27c0cc38dc3b60c03bb184eD�> � a11e1ecb8f7034384a2138c08abe5aa5f4f9996c624112e951eb5a42353bc197D�= � 1cd870f8b1c30e2f168c6960a8dde4ac59970a62aca538042b33d37a679f1a3bD�< � e033e09baf35ab533a503e8e87c8e01aae28de712da982f5371673bf0567fa4aD�; � 2c6eb5afea1c0a0fa2d5103b42a1dfd64c5d9d81d7974ab2bf5adbf20f29033a j �S�w2�j � j a��JqU <Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��I]) <Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4R��H]K ;Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��GiK ;Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��F]w ;Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��E]) ;Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��D]q ;Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��Cqq ;Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��B]) ;Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��Aq[ ;Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3 P �(�p�V � � P a��TqU =Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()A��S]) =Adam Jackson <ajax@redhat.com> - 1.6.4-1W��@- libX11 1.6.4X��RiK <Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��Q]w <Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��P]) <Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��O]q <Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��Nqq <Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��M]) <Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��Lq[ <Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��Kqk <Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 % �(�p�V � � % l��^qk >Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��]qU >Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()X��\iK =Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��[]w =Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��Z]) =Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��Y]q =Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��Xqq =Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��W]) =Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��Vq[ =Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3l��Uqk =Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2 ? �S�w2�j � ? l��hqk ?Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-3Xs{@- Fix a bug in the memory leak fix from 1.6.4-2a��gqU ?Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-2Xn5@- Plug a memory leak in XListFonts()R��f]K >Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��eiK >Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��d]w >Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��c]) >Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��b]q >Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��aqq >Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��`]) >Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��_q[ >Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3 3 �S�w2�j � 3 ���r�� @Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildA��q[+ @Adam Jackson <ajax@redhat.com> 3.5.10-1OX�@- libXpm 3.5.10R��p]K ?Adam Jackson <ajax@redhat.com> - 1.6.7-4a��- Fix CVE-2021-31535 (#1962438)X��oiK ?Michel Dänzer <mdaenzer@redhat.com> - 1.6.7-3_���- Fix CVE-2020-14363 (#1873922)h��n]w ?Adam Jackson <ajax@redhat.com> - 1.6.7-2\�"�- Restore the less-alarming server-disconnect messageA��m]) ?Adam Jackson <ajax@redhat.com> - 1.6.7-1\�r@- libX11 1.6.7e��l]q ?Adam Jackson <ajax@redhat.com> - 1.6.5-3\y �- Make the server-disconnect message less alarmingo��kqq ?Peter Hutterer <peter.hutterer@redhat.com> 1.6.5-2[GB�- Rebuild to pick up new xproto keysyms (#1600147)A��j]) ?Adam Jackson <ajax@redhat.com> - 1.6.5-1Y ��- libX11 1.6.5d��iq[ ?Peter Hutterer <peter.hutterer@redhat.com> 1.6.4-4X���- Actually apply the patch from 1.6.4-3 y dlr � y V��y�+ @Benjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X��@- libXpm 3.5.12���x�� @Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild���w�� @Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZ��v[] @Adam Jackson <ajax@redhat.com> 3.5.11-1R�b@- libXpm 3.5.11 - Drop pre-F18 changelog���u�� @Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildX��tw= @Peter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8�@- autoreconf for aarch64���s�� @Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild � u0��� � Z�� [] AAdam Jackson <ajax@redhat.com> 3.5.11-1R�b@- libXpm 3.5.11 - Drop pre-F18 changelog����� AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildX��~w= APeter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8�@- autoreconf for aarch64���}�� AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���|�� AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildA��{[+ AAdam Jackson <ajax@redhat.com> 3.5.10-1OX�@- libXpm 3.5.10���zw� @Peter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c�0�- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715) bR (RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��� � Á� ā� Ł� Ɓ� ǁ� ȁ�% Ɂ�* ʁ�/ ˁ�5 ́�8 ́�; �@ Ё�C с�G ҁ�L Ӂ�O ԁ�T Ձ�W ց�[ ׁ�` �c ف�i ځ�o ہ�t ܁�y ݁�~ ށ� ߁� � ၵ ⁵" ふ, 䁵6 偵@ 灵J 聵T 遵^ ꁵh 끵r 쁵y 큶 � � � � �! ���& ���) ���+ ���0 ���3 ���5 ���: ���= ���? ���F ��O ��X ��a ��i ��o ��t ��| �� �� �� �� �� �� �� �� �� �� ��! ��% ��& ��' ��* ��/ ��0 ��1 ��4 ��8 ��9 ��: ��= ��B ��C !��D "��G #��L $��O %��P &��S '��W c d�k�� � c ����� BFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild����� BFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_RebuildA��[+ BAdam Jackson <ajax@redhat.com> 3.5.10-1OX�@- libXpm 3.5.10���w� APeter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c�0�- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V���+ ABenjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X��@- libXpm 3.5.12����� AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild����� AFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild E ��o � E A��[+ CAdam Jackson <ajax@redhat.com> 3.5.10-1OX�@- libXpm 3.5.10���w� BPeter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c�0�- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V�� �+ BBenjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X��@- libXpm 3.5.12��� �� BFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild��� �� BFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZ�� [] BAdam Jackson <ajax@redhat.com> 3.5.11-1R�b@- libXpm 3.5.11 - Drop pre-F18 changelog��� �� BFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildX��w= BPeter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8�@- autoreconf for aarch64 7 d�l�r � 7 ����� CFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-3S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild����� CFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.11-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_RebuildZ��[] CAdam Jackson <ajax@redhat.com> 3.5.11-1R�b@- libXpm 3.5.11 - Drop pre-F18 changelog����� CFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-5Q��- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_RebuildX��w= CPeter Hutterer <peter.hutterer@redhat.com> - 3.5.10-4Q8�@- autoreconf for aarch64����� CFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild����� CFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.5.10-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild � ��I� � �(�� W�{ DKarel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��W�% DKarel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��W� DKarel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��Wk DKarel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)���w� CPeter Hutterer <peter.hutterer@redhat.com> - 3.5.12-2c�0�- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)V���+ CBenjamin Tissoires <benjamin.tissoires@redhat.com> 3.5.12-1X��@- libXpm 3.5.12 E � E ��� W�I DKarel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A�� W�- DKarel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\�� W�c DKarel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��!W�m DKarel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z�� W�_ DKarel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��&W�{ EKarel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��%W�% EKarel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��$W� EKarel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��#Wk EKarel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��"g�# DKarel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���)W�I EKarel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��(W�- EKarel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��'W�c EKarel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��+W�m EKarel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��*W�_ EKarel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��0W�{ FKarel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��/W�% FKarel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��.W� FKarel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��-Wk FKarel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��,g�# EKarel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���3W�I FKarel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��2W�- FKarel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��1W�c FKarel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��5W�m FKarel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��4W�_ FKarel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��:W�{ GKarel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��9W�% GKarel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��8W� GKarel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��7Wk GKarel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��6g�# FKarel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���=W�I GKarel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��<W�- GKarel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��;W�c GKarel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��?W�m GKarel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��>W�_ GKarel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit [ �i� � � [ L��F]? HDaniel Mach <dmach@redhat.com> - 0.6.8-5R�U�- Mass rebuild 2014-01-24L��E]? HDaniel Mach <dmach@redhat.com> - 0.6.8-4R�k�- Mass rebuild 2013-12-27� ��Di� HMatthias Clasen <mclasen@redhat.com> - 0.6.8-3Q�5�- Disable strict aliasing, since the code is not strict-aliasing-clean���C�� HFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJ��Bi/ HKalev Lember <kalevlember@gmail.com> - 0.6.8-1P��@- Update to 0.6.8J��Ai/ HKalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7�D��@g�# GKarel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] e �r+��V��: � � e D�T � c846a72195e654b76f0ca3467ec6a0e034d1907a307e6d797b1e4238ab8e1949D�S � 828fe4eb26915648840d50ea3daa571c3735822ed66eced81dd20b12dff3e10eD�R � 4c0432991858f896026445ef401636f12a857102f3329b8a5d034aa2e99e2bd4D�Q � 059cd706e5668cb53ab32ca18815011ad932d1853567a29b3c7b2afca689e637D�P � f3dc3c542749f94c4e3a601842a9a8d6311fb735a5d6ee8d3845ce5b137c43eeD�O � f92fde3f97c0034135796baa7cd55f87c0550a88ac79adbdcc9c7f64c595614bD�N � 7ab4f1b0aa285d3773fdbd8bfc529969ca101a627d3ea88bea1f99a42093e132D�M � 4ad0b71e3a6468fba1b43ab82fad024415b5296c7b77d1348fb9afa3f828f98eD�L � 3054ca1c0cc8eef5f08ce1d3be56c7a39e97d92361e8bd265bea14d06f590219D�K � 73952b31447b02abc10d1c2efafb6def58e9237532ddef9eb3a691baaa88a495D�J � 6602351182c085c415d4c05b7e325611057898b48cdc1249a54c5106cd0735fdD�I � eeec2b53758cdbb0b3f3402b7117dddcf34c40e99612fc0ec69bb799b2a7b6beD�H � b9bc38488c309455bbf6f753ef1aaaa244614ec08a027b5ff58a7b234006eac1 P �:�\�% � P L��O]? IDaniel Mach <dmach@redhat.com> - 0.6.8-4R�k�- Mass rebuild 2013-12-27� ��Ni� IMatthias Clasen <mclasen@redhat.com> - 0.6.8-3Q�5�- Disable strict aliasing, since the code is not strict-aliasing-clean���M�� IFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJ��Li/ IKalev Lember <kalevlember@gmail.com> - 0.6.8-1P��@- Update to 0.6.8J��Ki/ IKalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7n��Juk HMichael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'�A- Rebuild with 7.9-z target Related: #1835951h��Iu_ HMichael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'�@- Fix CVE-2020-12825 Resolves: #1835951`��Hi[ HRichard Hughes <rhughes@redhat.com> - 0.6.12-4X�-�- Update to 0.6.12 - Resolves: #1569991^��Ge[ HKalev Lember <klember@redhat.com> - 0.6.11-1Vr��- Update to 0.6.11 - Resolves: #1386999 P �N�~ �p � P � ��Xi� JMatthias Clasen <mclasen@redhat.com> - 0.6.8-3Q�5�- Disable strict aliasing, since the code is not strict-aliasing-clean���W�� JFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJ��Vi/ JKalev Lember <kalevlember@gmail.com> - 0.6.8-1P��@- Update to 0.6.8J��Ui/ JKalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7n��Tuk IMichael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'�A- Rebuild with 7.9-z target Related: #1835951h��Su_ IMichael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'�@- Fix CVE-2020-12825 Resolves: #1835951`��Ri[ IRichard Hughes <rhughes@redhat.com> - 0.6.12-4X�-�- Update to 0.6.12 - Resolves: #1569991^��Qe[ IKalev Lember <klember@redhat.com> - 0.6.11-1Vr��- Update to 0.6.11 - Resolves: #1386999L��P]? IDaniel Mach <dmach@redhat.com> - 0.6.8-5R�U�- Mass rebuild 2014-01-24 � �`��.�n � ���a�� KFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.8-2Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_RebuildJ��`i/ KKalev Lember <kalevlember@gmail.com> - 0.6.8-1P��@- Update to 0.6.8J��_i/ KKalev Lember <kalevlember@gmail.com> - 0.6.7-1P}L@- Update to 0.6.7n��^uk JMichael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'�A- Rebuild with 7.9-z target Related: #1835951h��]u_ JMichael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'�@- Fix CVE-2020-12825 Resolves: #1835951`��\i[ JRichard Hughes <rhughes@redhat.com> - 0.6.12-4X�-�- Update to 0.6.12 - Resolves: #1569991^��[e[ JKalev Lember <klember@redhat.com> - 0.6.11-1Vr��- Update to 0.6.11 - Resolves: #1386999L��Z]? JDaniel Mach <dmach@redhat.com> - 0.6.8-5R�U�- Mass rebuild 2014-01-24L��Y]? JDaniel Mach <dmach@redhat.com> - 0.6.8-4R�k�- Mass rebuild 2013-12-27 � {+�y�7 � ���ic�+ LKamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)n��huk KMichael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-6_'�A- Rebuild with 7.9-z target Related: #1835951h��gu_ KMichael Catanzaro <mcatanzaro@redhat.com> - 0.6.12-5_'�@- Fix CVE-2020-12825 Resolves: #1835951`��fi[ KRichard Hughes <rhughes@redhat.com> - 0.6.12-4X�-�- Update to 0.6.12 - Resolves: #1569991^��ee[ KKalev Lember <klember@redhat.com> - 0.6.11-1Vr��- Update to 0.6.11 - Resolves: #1386999L��d]? KDaniel Mach <dmach@redhat.com> - 0.6.8-5R�U�- Mass rebuild 2014-01-24L��c]? KDaniel Mach <dmach@redhat.com> - 0.6.8-4R�k�- Mass rebuild 2013-12-27� ��bi� KMatthias Clasen <mclasen@redhat.com> - 0.6.8-3Q�5�- Disable strict aliasing, since the code is not strict-aliasing-clean + r�� � + h��ocq LKamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��nc� LKamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��mcq LKamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��lcu LKamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��kc� LKamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��jc�1 LKamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292) \ x�u� \ � ��tc�1 MKamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)���sc�+ MKamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)v��rs} LKamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���qc�' LKamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���pc�% LKamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482) . �%�1 � . v��|s} MKamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���{c�' MKamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���zc�% MKamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��ycq MKamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��xc� MKamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h��wcq MKamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j��vcu MKamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��uc� MKamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639) � u�f � � h��cq NKamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j�� cu NKamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}��c� NKamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��~c�1 NKamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292)���}c�+ NKamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998) � ��� � ���c�+ OKamil Dudka <kdudka@redhat.com> - 7.29.0-51[j�@- require a new enough version of nss-pem to avoid regression in yum (#1610998)v��s} NKamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���c�' NKamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���c�% NKamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)h��cq NKamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|��c� NKamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736) + r�� � + h�� cq OKamil Dudka <kdudka@redhat.com> - 7.29.0-57]�e@- allow curl to POST from a char device (#1769307)|�� c� OKamil Dudka <kdudka@redhat.com> - 7.29.0-56]�?�- fix auth failure with duplicated WWW-Authenticate header (#1754736)h�� cq OKamil Dudka <kdudka@redhat.com> - 7.29.0-55]Ik�- fix TFTP receive buffer overflow (CVE-2019-5436)j�� cu OKamil Dudka <kdudka@redhat.com> - 7.29.0-54\� �- make `curl --tlsv1` backward compatible (#1672639)}�� c� OKamil Dudka <kdudka@redhat.com> - 7.29.0-53\��@- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)� ��c�1 OKamil Dudka <kdudka@redhat.com> - 7.29.0-52\y �- prevent curl --rate-limit from hanging on file URLs (#1281969) - fix NTLM password overflow via integer overflow (CVE-2018-14618) - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842) - backport options to force TLS 1.3 in curl and libcurl (#1672639) - prevent curl --rate-limit from crashing on https URLs (#1683292) � x�uS � ���q�A PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� ��q�K PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651v��s} OKamil Dudka <kdudka@redhat.com> - 7.29.0-59.el7_9.1_ @- avoid overwriting a local file with -J (CVE-2020-8177)���c�' OKamil Dudka <kdudka@redhat.com> - 7.29.0-59^�?@- http: free protocol-specific struct in setup_connection callback (#1836773)���c�% OKamil Dudka <kdudka@redhat.com> - 7.29.0-58^x��- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482) p p � ��q�' PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��q�o PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��q�q PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��q�} PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��q�s PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>� � � ��q�K QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651}��q� PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��q�a PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��q�1 PBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � c� � �� q�' QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556��� q�A QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 L L �/�� q�o QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��!q�q QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6�� q�} QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q�� q�s QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 +>� ���%q�A RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}��$q� QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��#q�a QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��"q�1 QBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��&q�' RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��'q�o RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��*q�q RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��)q�} RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��(q�s RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���/q�A SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651���.q�= RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��-q� RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��,q�a RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��+q�1 RBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��0q�' SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��1q�o SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��4q�q SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��3q�} SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��2q�s SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 " +>�" ���8q�= SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��7q� SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��6q�a SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��5q�1 SBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��9q�' TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��:q�o TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��=q�q TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��<q�} TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��;q�s TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���Bq� TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���Aq�= TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��@q� TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��?q�a TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��>q�1 TBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 e �r+��V��: � � e D�a � 18263e1b0a03802679269ba3b6efec82086ba491183c1ab84bd9de4e5a98c071D�` � 0c9cd97e333e5ea85907e92483ef91dbdb08349b7e29916dcf5c08061c74f836D�_ � 618179611cd44ba685db172d3afd1dc0248e66533a35b8e46cdf118d812340d3D�^ � 6dafcb9ecc7ca14a4ae5417e71c1fee10a7213e0ebf3d3750cbd23a8cacf5eefD�] � 49776569805f34f9417a664fb394e7bff8444fee386100309ce6306cba1c8b1aD�\ � 3bb0da4f1c883b5aaa0ad687bcc2022ba9573d912ff906b6657bc7e96676c5d9D�[ � 5c0bed31f5ed7d1cccaeb6276746900d9f0fe837b806759153ea696c3b33b423D�Z � 6337008a1e944b28b17317dcde8003b1ccb848dc5a09a17a27903c4e32e60846D�Y � ab2e63b3fe04a633b718c47d41143f7ffa9fb32076d41cfdb01feaef74cd6158D�X � a8bf325bc65d56d5cd74d8b007f3b2f09f0d1f6deccd0c0d0f56f515423fe6ebD�W � d756103ebb5cdaa112e97017abdb37c31ccacc831f5042c1c0c423e446ab3b8fD�V � d0c60cdd0430a434420ef3cbcd3cd9ebd0e4089f8059b3a3b7bc427c158c0505D�U � cebe503265c9efa9afa036f10cf99ab4d5eeabe4c13950dc76ba50fc4304f4fc p p � ��Cq�' UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��Dq�o UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��Gq�q UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��Fq�} UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��Eq�s UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���Lq� UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���Kq�= UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��Jq� UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��Iq�a UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��Hq�1 UBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � �A � � ��Oq�' VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556���Nq�A VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651� ��Mq�K VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651 L L �/��Pq�o VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��Sq�q VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��Rq�} VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��Qq�s VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>� � � ��Wq�K WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-125\d�- Modify 0250-RHBZ-1610867-rescan-change.patch * Fix memory Leak - Modify 0255-RHBZ-1638651-marginal-path.patch * Fix NULL dereference - Refresh 0252-RHBZ-1623595-cmd-error-status.patch - Resolves: bz #1610867, #1638651}��Vq� VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��Uq�a VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��Tq�1 VBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 � c� � ��Yq�' WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556���Xq�A WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651 L L �/��Zq�o WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��]q�q WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��\q�} WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��[q�s WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 +>� ���aq�A XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651}��`q� WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��_q�a WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��^q�1 WBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��bq�' XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��cq�o XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��fq�q XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��eq�} XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��dq�s XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���kq�A YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-126\d�- Modify 0255-RHBZ-1638651-marginal-path.patch * Fix memory leak - Resolves: bz #1638651���jq�= XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��iq� XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��hq�a XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��gq�1 XBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��lq�' YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��mq�o YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��pq�q YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��oq�} YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��nq�s YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 " +>�" ���tq�= YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��sq� YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��rq�a YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��qq�1 YBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��uq�' ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/��vq�o ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��yq�q ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��xq�} ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��wq�s ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���~q� ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���}q�= ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��|q� ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��{q�a ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��zq�1 ZBenjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 p p � ��q�' [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-127\�B@- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch * retry adding paths if they couldn't be opened initially - Add 0257-RHBZ-1679556-dont-check-dm-devices.patch * don't check if dm devices are multipath paths - Add 0258-RHBZ-1634183-ANA-prioritizer.patch * Add NVMe ANA path prioritizer - Resolves: bz #1634183, #1672175, #1679556 L L �/�� q�o [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-128]QT�- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch * minor change - Add 0259-RHBZ-1701604-fix-nr-active.patch * recalculate the number of active paths whenever a path is checked - Add 0260-RHBZ-1634183-prio-fixes.patch - Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch * ignore blacklisted paths in mpathpersist - Add 0262-RHBZ-1699486-reload-with-failed-paths.patch * allow forced reloads even if there are no reusable paths - Add 0263-RHBZ-1686708-nvme-hcil.patch * make nvme ids work like in upstream - Add 0264-RHBZ-1699441-de-series-config.patch - Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506 � O � �0��q�q [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-131]�- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch * The fix for 1721855 broke 1714506. - Resolves: bz #1714506�6��q�} [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-130]i�- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch * Fix issues in the mpathpersist speedup code - Resolves: bz #1721855�q��q�s [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-129]g�@- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch * only grab path information from necessary devices, and allow batch files. - Add 0266-RHBZ-1696817-fix-emc-checker.patch * fix detection of inactive snapshots - Add 0267-RHBZ-1661156-powermax-config.patch - Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch - Resolves: bz #1661156, #1696817, #1721855 � +>�" � ���q� [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-136cG��- Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905���q�= [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-135a�- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch - Resolves: bz #1988462}��q� [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-134__[@- Add 0272-RHBZ-1855901-lenovo-de.patch - Resolves: bz #1855901�h��q�a [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-133^��A- Add 0270-RHBZ-1775481-segfault-fix.patch * Fix segfault related to missing dm device tables - 0271-RHBZ-1806197-mpathconf-typo.patch - Resolves: bz #1775481, #1806197�P��q�1 [Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-132^��@- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch * Remove the 256 device limit, when searching loop devices with kpartx - Resolves: bz #1804420 _ T�� � _ ��� �� \Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild��� �� \Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� �� c�W \Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage��� �� \Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'�� c�m \Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup � �Y�h � ����� ]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'��c�m ]Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup���i�! \Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589g��u] \Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��_? \Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��_? \Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��cE \Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64 D �C�Q � D g��u] ]Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��_? ]Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��_? ]Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��cE ]Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64����� ]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild����� ]Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� ��c�W ]Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage r w�/ r ��� �� ^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� �� c�W ^Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage��� �� ^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'�� c�m ^Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup��� i�! ]Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589 0 d�lx � 0 ���(�� _Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'��'c�m _Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup���&i�! ^Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589g��%u] ^Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��$_? ^Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��#_? ^Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��"cE ^Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64���!�� ^Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild D �C�Q � D g��/u] _Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��._? _Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��-_? _Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��,cE _Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64���+�� _Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���*�� _Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� ��)c�W _Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage r w�/ r ���4�� `Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-2P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild� ��3c�W `Petr Šabata <contyk@redhat.com> - 0.6.21-1P �- 0.6.21 bump - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845) - Drop the pre-generated docs and introduce a doc subpackage���2�� `Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.20-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild�'��1c�m `Petr Sabata <psabata@redhat.com> - 0.6.20-1M�I@- 0.6.20 bump - Repackaging prehistoric libexif-docs, introducing version string in filename - Buildroot cleanup���0i�! _Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589 � d�lx � � ��;e�1 aLukas Nykryn <lnykryn@redhat.com> - 219-73.1]�@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)���:i�! `Richard Hughes <rhughes@redhat.com> - 0.6.22-2_�@- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Resolves: #1902589g��9u] `Michael Catanzaro <mcatanzaro@redhat.com> - 0.6.22-1^��@- Upgrade to 0.6.22 - Resolves: #1841316M��8_? `Daniel Mach <dmach@redhat.com> - 0.6.21-6R�U�- Mass rebuild 2014-01-24M��7_? `Daniel Mach <dmach@redhat.com> - 0.6.21-5R�k�- Mass rebuild 2013-12-27R��6cE `Petr Šabata <contyk@redhat.com> - 0.6.21-4QR�@- Run autoreconf for aarch64���5�� `Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.6.21-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild � <� � ��=� �/ asystemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��<� �u asystemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) F57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��A��m asystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��@�� asystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��?�W asystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��>��q asystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 E � ��. � � ��Ee�1 bLukas Nykryn <lnykryn@redhat.com> - 219-73.1]�@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)���D� � asystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��C� �' asystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��B�I asystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) e �r+��V��: � � e D�n � c5512bfc8f5d17195d34252e20dd34ef75e390d9bb8a38b30ba8be4e5c0904adD�m � dcccb19275e44c98b220ff45b313949c6d1e421f5326c9e3d8f568c1ae986c15D�l � 894926755bf0b5caaf2195043acd56dcc5dc992c1c51411a5e923a6e2e1d55cbD�k � a8d6b71da3251c0921f8f1c9a527fe6468bab3f326f472567681e24f3f9bbd61D�j � 02f065f8fc1a7dad64b3db9dce1c2acf7f0fdb727133ffef1c209fa011adbcd6D�i � 841781e279649ca9fced8e74583d9a30e6d5e96023b689f339cd0c6814f8a746D�h � 126385b940d5f6f201b6b30130139b0125b1d44dc7842c59cc7cbba5a9a4404dD�g � 3aa88d01f6198efa435e94380ac7bb30d03f89a522b7860137a566276cea51c9D�f � 1ee43730cfd6c1751ff45f321c91c0f0965e683e47cb52b91f87ac210ed93c1aD�e � de11efb648c50dca4022b29c14b4bc06fdcb8f36be5009d20018c917583af9bcD�d � 693e3ce2908adefcc2bc524795b6cde949103c699866ca985fd42a827214dd0eD�c � 946b8442c4a0e72fe683a8d2c6b3ab7143aa27670b547b3ff7849aa236ae494bD�b � aa74fc65a3e070d797d17ec1a51bec20f0c5a1f1ff74f20bd9459369a3b80568 � <� � ��G� �/ bsystemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��F� �u bsystemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) L57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��K��m bsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��J�� bsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��I�W bsystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��H��q bsystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 K . ��. ���N� � bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��M� �' bsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��L�I bsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��P� �/ csystemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��O� �u csystemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) Q57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��T��m csystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��S�� csystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��R�W csystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��Q��q csystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 P � ��. � � ��X� � csystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���W� � csystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��V� �' csystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��U�I csystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��Z� �/ dsystemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��Y� �u dsystemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) V57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��^��m dsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��]�� dsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��\�W dsystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��[��q dsystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 U � ��. � � ��b� � dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���a� � dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��`� �' dsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��_�I dsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) Z57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��f��m esystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��e�� esystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��d�W esystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��c��q esystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 Y � ��. � � ��j� � esystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���i� � esystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��h� �' esystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��g�I esystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) \ �( \ �;��m��q fsystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 ^�.��l� �S esystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��k� �7 esystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) _57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) � ���� � �X��r� �' fsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��q�I fsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��p��m fsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��o�� fsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��n�W fsystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744) bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ )��Z *��] +��a ,��b -��c .��f /��k 0��l 1��m 2��p 3��t 4��u 5��v 6��y 7��~ 8�� 9�� :�� ;�� <�� =�� >�� ?�� @��( A��/ B��4 C��; D��= G��A H��E J��G M��K N��N O��P R��T S��X T��Z W��^ X��b [��f \��j ]��m `��r b��u c��z d��} e�� f�� g�� h�� k�� l�� m�� p�� q�� r�� u��$ v��( w��* z��. {��2 ~��6 ��: ���= ���B ���E ���J ���M ���S ���V ���\ ���e ���n ���w ��� ��� ��� ��� ��� ��� ���% ���+ ���1 ���5 ���8 ���9 ���: ���; ���< ���? ���B ���C ���D ���E ���F ���I ���L ���M � u� � � ��u� �7 fsystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� ��t� � fsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���s� � fsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232) r Mw�O r �X��z� �' gsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��y�I gsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��x��m gsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��w�� gsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)�.��v� �S fsystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361) � u� � � ��}� �7 gsystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� ��|� � gsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���{� � gsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232) 0 M�.X � 0 f���I hsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9����m hsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q���� hsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)� �� � � gsystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��� � gsystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��~� �S gsystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361) #� � ��� � hsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���� � hsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��� �' hsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527) z �(� z � �� e�1 iLukas Nykryn <lnykryn@redhat.com> - 219-73.1]�@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)� �� � � hsystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� �� � � hsystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��� �S hsystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��� �7 hsystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) � <� � �� � �/ isystemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?�� � �u isystemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) j57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9����m isystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q���� isystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m���W isystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;����q isystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 i � ��. � � ��e�1 jLukas Nykryn <lnykryn@redhat.com> - 219-73.1]�@- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)���� � isystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��� �' isystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f���I isystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��� �/ jsystemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��� �u jsystemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) o57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9����m jsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q���� jsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m���W jsystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;����q jsystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 n . ��. ��� � � jsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X�� � �' jsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f�� �I jsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � �� � �/ ksystemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?�� � �u ksystemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) t57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��$��m ksystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��#�� ksystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��"�W ksystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��!��q ksystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 s � ��. � � ��(� � ksystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���'� � ksystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��&� �' ksystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��%�I ksystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) � <� � ��*� �/ lsystemd maintenance team <systemd-maint@redhat.com> - 219-73.3^`�- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)�?��)� �u lsystemd maintenance team <systemd-maint@redhat.com> - 219-73.2^K�- core: when restarting services, don't close fds (#1803802) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802) - tests: add basic journal test (#1803802) - tests: add regression test for `systemctl restart systemd-journald` (#1803802) - tests: add test that journald keeps fds over termination by signal (#1803802) y57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��.��m lsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��-�� lsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��,�W lsystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��+��q lsystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 x � ��. � � ��2� � lsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���1� � lsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��0� �' lsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��/�I lsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) }57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) / 4� � / �9��6��m msystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��5�� msystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��4�W msystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744)�;��3��q msystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 | � ��. � � ��:� � msystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���9� � msystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��8� �' msystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��7�I msystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816) \ �( \ �;��=��q nsystemd maintenance team <systemd-maint@redhat.com> - 219-74^��- sd-bus: bump message queue size again (#1770158) - unit: fix potential use of cgroup_path after free() when freeing unit (#1760149) - add test for ExecStopPost (#1733998) - core: when restarting services, don't close fds (#1757704) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704) - tests: add basic journal test (#17 ��.��<� �S msystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��;� �7 msystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) �57704) - tests: add regression test for `systemctl restart systemd-journald` (#1757704) - tests: add test that journald keeps fds over termination by signal (#1757704) - nss-util: silence warning about deprecated RES_USE_INET6 (#1799002) - journal: do not trigger assertion when journal_file_close() get NULL (#1786046) - mount: don't propagate errors from mount_setup_unit() further up (#1804757) - mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757) - fix the fix for #1691511 (#1804757) - v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053) - Consider smb3 as remote filesystem (#1811700) - mount: don't add Requires for tmp.mount (#1813270) - sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928) - sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889) - sd-journal: remove the dead code and actually fix #14695 (#1812889) - swap: adjust swap.c in a similar way to what we just did to m ount.c (#1749621) - swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621) - core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576) - run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576) - core: clarify that the CollectMode bus property is constant (#1817576) - udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028) - logind: check PolicyKit before allowing VT switch (#1797672) - timer: don't use persietent file timestamps from the future (#6823) (#1769923) - core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477) - bus_open leak sd_event_source when udevadm trigger。 (#1798503) - journal-remote: split-mode=host, remove port from journal filename (#1244691) - core: downgrade log message about inability to propagate cgroup release message (#1679934) - units: move Before deps for quota services to remote-fs.target (#5627) (#1693374) - set kptr_restrict=1 (#1689344) � ���� � �X��B� �' nsystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��A�I nsystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��@��m nsystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��?�� nsystemd maintenance team <systemd-maint@redhat.com> - 219-76^�lA- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)m��>�W nsystemd maintenance team <systemd-maint@redhat.com> - 219-75^�l@- journal: break recursion (#1778744) � u� � � ��E� �7 nsystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� ��D� � nsystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���C� � nsystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232) r Mw�O r �X��J� �' osystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527)f��I�I osystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��H��m osystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��G�� osystemd maintenance team <systemd-maint@redhat.com> - 219-76^�l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)�.��F� �S nsystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361) e �r+��V��: � � e D�{ � 7bb7db4c0e3b5dbb711a2589b4e752e8fe25c9b73185eaa3eecc00450d613c21D�z � 1db80fc0b7ec4ad66d1f7b86e831c3ed4d4386b1db1558cc7afcecf08ff5184eD�y � 5cf5d9d1af4c78ca14d14daa45c998d5f75484a3ab878d4a4e8caae845ff0c1dD�x � 551d2065c265d1e53d4bec46b49874d3aff2ccc0e5b50f98b64fb49c31c77700D�w � 54d67315041544440edcdc1a784b786f749cce152edd23d3ed953826b64a5b3bD�v � 7ae732734ae47230b9ee78bd90d72d963f85df5663e2f2ce2377f9f040e2ced7D�u � d91245d56499e00006afb5caef9f595c26917df6d3112f9952a0e2b928994342D�t � 565a99b9e94164785e21e6c316bc072e35df5c03df3267601461e2b96157b0f9D�s � fc6296617d74745ac75f51e708264f5e77144e1a594d2ddfaadc84e9d9d9624dD�r � ca42c81542be47ee686bcb3662bdb26e91f2fa0041534bf807e0b9294dcae15aD�q � 1409a93de8f33913e0adaf61bf58a25d2d2e6253e503e532e910519107835c33D�p � 0d7fa70d37741c62bde710cf842f10260cf261673a4a7408c061b0e28d2bc955D�o � 80b9e73c5db5a194278ac3415303dcf5c49c780dae020e15b55a65a9e02f2a56 � u� � � ��M� �7 osystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)� ��L� � osystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���K� � osystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232) 0 M�.X � 0 f��S�I psystemd maintenance team <systemd-maint@redhat.com> - 219-78^���- avoid double free (#1832816)�9��R��m psystemd maintenance team <systemd-maint@redhat.com> - 219-77^���- core: coldplug possible nop_job (#1829754) - core: make sure to restore the control command id, too (#1828953)�Q��Q�� psystemd maintenance team <systemd-maint@redhat.com> - 219-76^�l@- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291) - core: rework StopWhenUnneeded= logic (#1775291)� ��P� � osystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��O� � osystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��N� �S osystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361) #� � ��V� � psystemd maintenance team <systemd-maint@redhat.com> - 219-78.3`��- core: Detect initial timer state from serialized data (#1764908)���U� � psystemd maintenance team <systemd-maint@redhat.com> - 219-78.2_��- core: don't update unit description if it is already set to the same value (#1793527) - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527) - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)�X��T� �' psystemd maintenance team <systemd-maint@redhat.com> - 219-78.1_3�- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527) - device: don't emit PropetiesChanged needlessly (#1793527) . �(� � . o��\e} qKalev Lember <klember@redhat.com> - 3.14.1-3W��- Switch to new METAR data provider - Resolves: #1371550d��[ka qMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations Resolves: #1304249� ��Z� � psystemd maintenance team <systemd-maint@redhat.com> - 219-78.7b�- resolve: introduce reference counting on DnsStream (#2110544)� ��Y� � psystemd maintenance team <systemd-maint@redhat.com> - 219-78.6b��- resolved: pin stream while calling callbacks for it (#2110544)�.��X� �S psystemd maintenance team <systemd-maint@redhat.com> - 219-78.5a��@- install: fix a potential crash (#1828758) - acl-util: only set the mask if not present (#2026361)� ��W� �7 psystemd maintenance team <systemd-maint@redhat.com> - 219-78.4a���- test: add a test/reproducer for BZ#1989245 (#1989245) - strv: fix buffer size calculation in strv_join_quoted() (#1989245) - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758) / �7�V�u � / d��eka rMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations Resolves: #1304249s��duu qMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y�@- Fix no weather data available - Resolves: #1938275c��c]m qDavid King <dking@redhat.com> - 3.28.2-3]>�- Fix multilib conflict in subpackage (#1623538){��bo� qDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,�- Fix dangling symbolic link to README.md - Resolves: #1569295^��ae[ qKalev Lember <klember@redhat.com> - 3.28.2-1[a��- Update to 3.28.2 - Resolves: #1569295{��`i� qRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#�@- Backport a patch to fix a gnome-shell crash - Related: #1569295^��_e[ qKalev Lember <klember@redhat.com> - 3.28.1-1Z���- Update to 3.28.1 - Resolves: #1569295c��^qY qFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y��- Update to 3.26.0 - Related: #1481381^��]e[ qKalev Lember <klember@redhat.com> - 3.20.4-1XbW�- Update to 3.20.4 - Resolves: #1387009 $ �+�b�� � $ s��nuu rMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y�@- Fix no weather data available - Resolves: #1938275c��m]m rDavid King <dking@redhat.com> - 3.28.2-3]>�- Fix multilib conflict in subpackage (#1623538){��lo� rDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,�- Fix dangling symbolic link to README.md - Resolves: #1569295^��ke[ rKalev Lember <klember@redhat.com> - 3.28.2-1[a��- Update to 3.28.2 - Resolves: #1569295{��ji� rRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#�@- Backport a patch to fix a gnome-shell crash - Related: #1569295^��ie[ rKalev Lember <klember@redhat.com> - 3.28.1-1Z���- Update to 3.28.1 - Resolves: #1569295c��hqY rFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y��- Update to 3.26.0 - Related: #1481381^��ge[ rKalev Lember <klember@redhat.com> - 3.20.4-1XbW�- Update to 3.20.4 - Resolves: #1387009o��fe} rKalev Lember <klember@redhat.com> - 3.14.1-3W��- Switch to new METAR data provider - Resolves: #1371550 3 �%�\�{ � 3 c��w]m sDavid King <dking@redhat.com> - 3.28.2-3]>�- Fix multilib conflict in subpackage (#1623538){��vo� sDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,�- Fix dangling symbolic link to README.md - Resolves: #1569295^��ue[ sKalev Lember <klember@redhat.com> - 3.28.2-1[a��- Update to 3.28.2 - Resolves: #1569295{��ti� sRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#�@- Backport a patch to fix a gnome-shell crash - Related: #1569295^��se[ sKalev Lember <klember@redhat.com> - 3.28.1-1Z���- Update to 3.28.1 - Resolves: #1569295c��rqY sFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y��- Update to 3.26.0 - Related: #1481381^��qe[ sKalev Lember <klember@redhat.com> - 3.20.4-1XbW�- Update to 3.20.4 - Resolves: #1387009o��pe} sKalev Lember <klember@redhat.com> - 3.14.1-3W��- Switch to new METAR data provider - Resolves: #1371550d��oka sMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations Resolves: #1304249 # �!�L�� � # {�� o� tDebarshi Ray <rishi@fedoraproject.org> - 3.28.2-2[l,�- Fix dangling symbolic link to README.md - Resolves: #1569295^��e[ tKalev Lember <klember@redhat.com> - 3.28.2-1[a��- Update to 3.28.2 - Resolves: #1569295{��~i� tRichard Hughes <rhughes@redhat.com> - 3.28.1-2[#�@- Backport a patch to fix a gnome-shell crash - Related: #1569295^��}e[ tKalev Lember <klember@redhat.com> - 3.28.1-1Z���- Update to 3.28.1 - Resolves: #1569295c��|qY tFlorian Müllner <fmuellner@redhat.com> - 3.26.0-1Y��- Update to 3.26.0 - Related: #1481381^��{e[ tKalev Lember <klember@redhat.com> - 3.20.4-1XbW�- Update to 3.20.4 - Resolves: #1387009o��ze} tKalev Lember <klember@redhat.com> - 3.14.1-3W��- Switch to new METAR data provider - Resolves: #1371550d��yka tMatthias Clasen <mclasen@redhat.com> - 3.14.1-2Wv[@- Update translations Resolves: #1304249s��xuu sMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y�@- Fix no weather data available - Resolves: #1938275 � �"e�Y � � ��Y�) uJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��Y� uJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��Y�? uJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��Y� uJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274s��uu tMichael Catanzaro <mcatanzaro@redhat.com> - 3.28.2-4`Y�@- Fix no weather data available - Resolves: #1938275c��]m tDavid King <dking@redhat.com> - 3.28.2-3]>�- Fix multilib conflict in subpackage (#1623538) u %�0� u ��� [�O uHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699��� [�C uHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� �� [�; uHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b�� [m uHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��[�; uHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��Y�U uJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296 H C�7� � H � ��[�; vHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��Y�U vJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��Y�) vJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��Y� vJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��Y�? vJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8�� Y� vJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274 � x�" � x��Y� wJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��Y�? wJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��Y� wJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���[�O vHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���[�C vHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��[�; vHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��[m vHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412 � {�� � ��� [�C wHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� �� [�; wHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b�� [m wHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� �� [�; wHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��Y�U wJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��Y�) wJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541 > g�� > �V��%Y�U xJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��$Y�) xJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��#Y� xJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��"Y�? xJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��!Y� xJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274��� [�O wHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699 � q |�P � �8��+Y� yJarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���*[�O xHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���)[�C xHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��([�; xHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��'[m xHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��&[�; xHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585 � p�o� � b��1[m yHonggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��0[�; yHonggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��/Y�U yJarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��.Y�) yJarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��-Y� yJarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��,Y�? yJarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426 � q�E � �T��5o�; zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]���4[�O yHonggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���3[�C yHonggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��2[�; yHonggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482 w qx w �|��8o� zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��7o�{ zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��6o�' zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��9o�w zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��:o�E zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��;o� zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��<o�m zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��?o�; {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��>q�O zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���=o� zAlexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��Bo� {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Ao�{ {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��@o�' {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Co�w {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Do�E {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Eo� {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Fo�m {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��Io�' |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��Hq�O {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Go� {Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] e �r+��V��: � � e D� � 75cdb68690a46ab40f6949579f2ea4df2f3e811398a7dcefb77813e87272e899D� � d787f263d801d560eb3933a597fbdb2f4eb89a55b5cd49730ab0dc795715c028D� � 9c3d41d6041f9bdd8e0938ed6e0638aa29653f13b1631dd40dfbcc0dce9adc28D� � 6b59b214e1d648dd6450ccf97a6e02143f15dcb331b6d520b32e3390c35df31eD� � 3be8775407bc08f4fe54e5628c556d5472f9d4ef0d5b89d29c9c9b634121cb07D� � a48861f8b0007e766c5886a948e293f97eb2f45c90d1afc5373722cf5a163b72D� � 0cad55db6dba2a060d78d5cd109fe110b948f6008192e29b843fe591ffec7fc2D� � dbd4fcb28f8cbfd9fb540e8d37c4b83f661fd5b856fa728606339a61f95f4513D� � 0b0f6b7bf49772aa7d4525fb75fddff1ff77a08c6c3cf4c990c7fcb0fd59a2b9D� � a4ed3b8d30ed584009accf96a7436d098f14e555ae10c804f398816146a347e6D�~ � 1e9ecb13d56ad5c7fa67acece7a0f89c452b11bad3fc66a7589eb57a67fdb766D�} � 00dbfd02a12975ec58e646015d21c1697f304b58353b1372310d96c80b2903aeD�| � 4c0fe67802024d085939269a1da54ef7d9c6feea27bc2b6b94c3c64d18835d38 � � �2��Lo�w |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Ko� |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Jo�{ |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��Mo�E |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��No� |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Oo�m |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Rq�9 |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Qq�O |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Po� |Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��Uo� }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��To�{ }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��So�' }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Vo�w }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Wo�E }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Xo� }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Yo�m }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���\q�9 }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��[q�O }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Zo� }Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��_o�w ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��^o� ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��]o�{ ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��`o�E ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��ao� ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��bo�m ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���eq�9 ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��dq�O ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���co� ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��ho� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��go�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��fq�a ~Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��io�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��jo�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��ko� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��lo�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���oq�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��nq�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���mo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��ro�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��qo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��pq�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��so�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��to� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��uo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���xq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��wq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���vo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��{o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��zq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��yq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��|o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��}o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��~o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|�� q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h�� q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���O ���R ���U ���V ���W ���X ���Y ���\ ���_ ���` ���a ���b ���e ���h ���i ���j ���k ���l ���o ���r ���s ���t ���u ���x ���{ ���| �} Á�~ ā� Ł� Ɓ� ǁ� ȁ� Ɂ� ʁ� ˁ� ́� ́� � ρ� Ё� с� ҁ� ԁ� Ձ� ց� ׁ�! �" ف�# ځ�$ ہ�% ܁�( ݁�+ ށ�. ߁�0 �2 ၻ5 ⁻8 ほ: 䁻< 偻? 恻B 灻E 聻H 遻I ꁻJ 쁻M 큻O R S �T �V �X �[ �\ ���] ���_ ���b ���e ���f ���g ���i ���k ���n ���o ���p ��q ��s ��u ��x ��y ��z ��{ ��| �� �� �� �� : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��!q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|�� q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h�� q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��"q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��#o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��$o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��%o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���(q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��'q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���&o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��+q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��*q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��)q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��.a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��-a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��,q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��0a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��/a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��2g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��1c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��5g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��4g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���3g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��8a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��7a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��6g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t��:a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��9a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��<g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��;c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��?g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��>g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���=g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��Bi�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��Ai� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��@g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��Eo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Dk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��Ci� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��Ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Go�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Fo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Io�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Jo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] e �r+��V��: � � e D� � 0136b7f5a2716c2969f4dc132e19b7819af04e2aa0c5ba9bd9774ccf09c14e9fD� � 9b4b4560b2485d70634ad393bde40d05f38c2ecce03135964bdc3876bf556570D� � 07b1856027333bf98a662c1c5c7b92d2391deb1108f57f3ca5b27d6ee192f7a0D� � b4bb4d388af0708a559cf09c5a7fc75ab89a349115729620b72c790f28e7422eD� � 9ebd06e0dbe03a1b81d2bb45598fa8b2a8423c754eb01c2dc19009b37889af7dD� � ac082581e82346ea696427fe38a4a1ad08c1a2f428d21c026da32d80aa0c4cfeD� � 79b1198c3958d0c5aaf003eb2c5f482ad658aac62e3b7fe05127e6498153d891D� � 9ddb3989f547bec0175c3f866ce77a6ac4742203e5567fcd03af76e451568f49D� � 6e22c4b0aee7e9979b7f739d1db74f8609f8f27a72d28c139c4b20648516c712D� � 3cfc9f52a00f0406e2e427948342a30ca2cd4762712b56ebee9d8bf24018e163D� � 720ce08cb7d09fef55e566296d6985f0a465fbdb1a66bfda747f53f178f67f3aD� � 4168f549a1eed91719335c29e0efff79a7747ffbbdf777b56e435e5123a039a7D� � 0f725b790a384924e7b95b0b06d3009171c8060554b98e9cc285dabe9c324930 � �L � x��Mi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��Li�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��Ki� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��Oo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Nk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Qo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Po�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��So�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��To�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��Vi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��Ui�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��Xo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Wk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��[o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Zo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Yo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��\o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��]o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��_i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��^o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��bo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��ak�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��`i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��do�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��co�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��fo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��go�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��ii� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��ko�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��jk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��no� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��mo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��lo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��oo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��po�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��qo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��si� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��ro�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��uo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��tk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��wo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��vo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��yo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��zo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��{o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��|o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��~o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��}o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��!o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���$q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��#q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���"o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��'o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��&o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��%o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��(o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��)o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��*o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���-q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��,q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���+o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��0o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��/o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��.q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��1o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��2o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��3o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��4o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���7q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��6q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���5o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��:o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��9o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��8q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��;o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��<o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��=o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���@q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��?q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���>o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��Co� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��Bq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Aq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��Do�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Eo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Fo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Go�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Jq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Iq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��Mo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Lq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Kq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update e �r+��V��: � � e D�" � ad1b306ed16dae044e07261f88e7b3e1846b160926009eba1eb3b872ad1d6443D�! � 03701d6e0d843fdfb34d5135af97796623145817df79fabb6a8fb6eed7cfb552D� � fb317c790c7775a8cd2becc6286e6028a33743078585cef6e150d0614e34aa17D� � 4aeb4ec586ae68b258e3a26e5bf455914a1bef9bf96ce52ea53b74decb9d1176D� � 31f46b22cd82ef4ccbb472cae30cc13508b35a42fe8d5807a5d9fc45b18a830aD� � 33522ef6344e2c23c9585439f96860fbac64c8059e3fafe85e39f00d654826beD� � 676257fa89a2415e1fed624878b0d5c3f3c334c139f75c44938d08415b9e8b3fD� � 9c9453260d66b8957dc7fb411913d40ce90346035eda2b58c2f9c759b2125cf7D� � 0f791fdbdca1788b246815a870b316c43b536133a58c0b7483e09cce243dbf52D� � 5df1a4e83ab5135939c23e1037e6d05b3b83a60b3b4a06fb6e85e91959657cbdD� � c942cd6a2b252aa88c37729e5753a20d63376cc0d329bdcbc5265806440a4f46D� � b1a437d314e4c8a0e5d1e099a8fdbcdb1ff51d9795ce9c175c3bce0b7e4ca564D� � 4483963c33f057bfcd4b6120dbcefdc634413263eea9af2c988563522cfa5127 " " �Y��No�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Oo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] bR qRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� �� ��! ��$ ��' ��( !��) "��* #��- $��0 %��1 &��2 '��3 (��4 )��7 *��: +��; ,��< -��= .��@ /��C 0��D 1��E 2��F 3��G 4��J 5��M 7��N 8��O :��P ;��S <��V =��W >��X ?��Y @��Z A��] B��` C��a D��b E��c F��f G��i H��j I��k J��l K��m L��p M��s N��v O��x P��z Q��} R�� S�� T�� U�� V�� W�� X�� Y�� Z�� [�� \�� ]�� ^�� _�� `�� a�� b��# c��$ d��% e��' f��* g��- h��. i��/ j��1 k��3 l��6 m��7 n��8 o��9 p��; N N �-��Po�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Sq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Rq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Qo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Vq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Uq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Tq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��Wo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Xo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Yo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Zo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���]q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��\q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���[o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��`q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��_q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��^q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��ao�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��co�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���fq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��eq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���do� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��iq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��hq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��gq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��jq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��ko�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��lo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��mo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���pq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��oq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���no� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��sq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��rq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��qq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��va� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��ua�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��tq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��xa� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��wa�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��zg�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��yc�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��}g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��|g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���{g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y�� a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��~g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t��a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-�� i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}�� i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T�� o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c�� k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex�� i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x�� i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-�� i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T�� o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c�� k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��#o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��"o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��!o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��$o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��%o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��'i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��&o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��*o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��)k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��(i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��-o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��,o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��+o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��.o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��/o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��1i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��0o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��3o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��2k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��6o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��5o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��4o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��7o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��8o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��9o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��;i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��:o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��=o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��<k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��@o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��?o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��>o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Ao�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Bo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Co� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N � N |��Fm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��Em� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726�-��Do�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � v��� � ��Mm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Lm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Km� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��Jmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Ima �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Hm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Gm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347 � {�{�q � o��Tmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��Sma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��Rm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Qm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>��- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Pm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927|��Om� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-41]>�- Update man pages to reference kerberos(7) - Resolves: #1704726� ��Nm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 e �r+��V��: � � e D�/ � ee580eaecadcceeb9560a23a48c376d9c012f5fee8623d0f10419c273b744065D�. � 46064f76c45b401ff1197bbdcd32585b704afcef86d2dad3fb76250749b3ef7dD�- � b93825bf103f570b5e1032748e404b0d685f2025279cdfd1efbd0506671dd269D�, � 09f2614aeded0a8d1f7454f0270fe81a129ba048470ed9851001049d758c2a0fD�+ � 02d7a80b905c4425a04fb580f2e9cedea180c37a12f4aebcc804d768f6a12ffdD�* � 1a363c8575a8323b1e1cbafa08ba87655572c3b032a755bcf5cf957927fb9a70D�) � ec1b22bbbd65cf0d8ac4abc748b4d4e1721149c816440d123ce3d707e25059a8D�( � 8f22a24548ec519571fd7dcc4779339bb29955be70e289533d286d4069cdfe23D�' � 3c4ec0f5afdd9b9d8e623857335cfd73d8e86540fe7c74886a0fc678fbf926acD�& � b410c0490c2af4f7e5e57b126535f682c43747b4f65ab0c3b8b86259df169293D�% � 2d79f11c74a72adcef4f3407e674947b25332958c8d3722a976ffc2d712fb812D�$ � ca2534fe257e28c069b648a161fddd50d841f1df267a98ca33d8ceea488d83c7D�# � 868a84b5cfeae8a5e75edd91fc853a5ed3490b4de3805f6ff0020f5483875122 e z�t�o � e |��[m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���Zm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��Ym� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927� ��Xm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��Wm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��Vm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���Um� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 z �$�� z ���bm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��am� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��`m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��_m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���^m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��]mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��\ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726 � ��v � � ��im� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���hm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��gmu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��fma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>��- Install kerberos(7) - Resolves: #1704726|��em� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>��- Address some optimized-out memset() calls - Resolves: #1663506���dm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-43]>�- Correct kpasswd_server description in krb5.conf(5) - Resolves: #1498347|��cm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-42]>�- Log when non-root ksu authorization fails - Resolves: #1270927 } }�_�v } ���pm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��omu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��nma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726|��mm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���lm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��km� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��jm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 ? }�u�F � ? |��wm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-44]>�- Address some optimized-out memset() calls - Resolves: #1663506���vi� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���ui�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���tm�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��sm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��rm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��qm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492 z �$�� z ���~m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��}m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��|m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��{m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���zm� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��ymu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>��- Add pkinit_cert_match support - Resolves: #1656126e��xma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726 { j�z� � { ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492���m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289o��mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e��ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726��� i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319 Z {�L�6 � Z o�� mu �Robbie Harwood <rharwood@redhat.com> - 1.15.1-46]>�- Add pkinit_cert_match support - Resolves: #1656126e�� ma �Robbie Harwood <rharwood@redhat.com> - 1.15.1-45]>�- Install kerberos(7) - Resolves: #1704726� �� i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961��� i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492 9 z�t�V � 9 ���i� �Julien Rische <jrische@redhat.com> - 1.15.1-54bi0@- Try harder to avoid password change replay errors - Resolves: #2063163���i�; �Julien Rische <jrische@redhat.com> - 1.15.1-53bN�@- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066319���m�= �Antonio Torres <antorres@redhat.com> - 1.15.1-51ap�- Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997599� ��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-50^��- Disable smoke tests on s390x and remove sleep - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-49^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-48^��- Fix LDAP policy enforcement of pw_expiration - Resolves: #1782492��� m� �Robbie Harwood <rharwood@redhat.com> - 1.15.1-47^��- Do expiration warnings for all init_creds APIs - Resolves: #1733289 A q �"�; � A ����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versiond��ic �Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M�{@- libksba-devel multilib conflict (#601976)� ��i�- �Julien Rische <jrische@redhat.com> - 1.15.1-55cjD�- Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140961 q �`�R� � q [��$[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��#[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���"�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���!�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH�� [9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versiond�� ic �Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M�{@- libksba-devel multilib conflict (#601976)V�� _Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L�� ]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L�� ]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27 > e�k � � � > [��-[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��,[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���+�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���*�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��)[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versionV��(_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��']? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��&]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���%�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild B e�k�) � B H��6[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���5�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���4�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��3[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versionW��2_S �Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c��- Fix for CVE-2022-47629 (#2161571)V��1_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��0]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��/]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���.�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild b ��f �I � b ���?�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��>[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versiond��=ic �Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M�{@- libksba-devel multilib conflict (#601976)W��<_S �Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c��- Fix for CVE-2022-47629 (#2161571)V��;_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��:]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��9]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���8�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��7[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-config q e� �% � q H��H[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versiond��Gic �Rex Dieter <rdieter@fedoraproject.org> 1.0.8-3M�{@- libksba-devel multilib conflict (#601976)V��F_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��E]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��D]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���C�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��B[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��A[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���@�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild > e�~ �4 � � > H��Q[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream versionV��P_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��O]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��N]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���M�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��L[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��K[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���J�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���I�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild e �r+��V��: � � e D�< � c10cbe426290ea35692c88e6f4393bef89f510b20d8587b123e03a419891e2a3D�; � 13f0a70db8c30427ac5dcfc998ed9c2ea98da56b6c4439d62d54bc51fca0c198D�: � 776a13c05abec92b93e26a3e73b33106410100566b5e395d5a22469f660365abD�9 � 74ba5dbc31e8d072aad83ccc34e693990c0625ce81a367690bc1cc6bbdbdc121D�8 � 2d1f2caacc8bdd289ec4d9a21bbe90c08d63cc088bec34c32f2acb2df58d2761D�7 � 4d0e360eff9294623b345353bcf2cb4623c50a3e2bf31ace6ba05141150d85fdD�6 � 359852ce38e0555b23e78c945070ef67c0599138eac0c52de77a819e8fdebce9D�5 � cec370a7441899c3ffcd47f783a0437d9d649fd4a1252c6c317561f431e537c4D�4 � 36ad5a43df60889dd9c1134cb0e042317befa64f7293f44bc91271fddbbfc7e6D�3 � d5b31f13f3b46bf5b0b92ae49a2422fef7d5c0ecefccc27c7b96a0aae7f7ce31D�2 � 0c8fa4695663226154eeb62875404c38ac8f61913460fe2e8036ae8e76cad75eD�1 � 082abb4e91620918c0d5d1da8dfb191f950c793d112a4ac3ec4f2055ca594c68D�0 � d66f8f50f89a80ba6132ad39773812f3a9b5d598db35a63de6e8465c3c7137d8 / e�~ �4 � � / W��Z_S �Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c��- Fix for CVE-2022-47629 (#2161571)V��Y_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��X]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��W]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���V�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��U[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��T[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���S�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���R�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild > �~2�8 � � > V��c_Q �Jakub Jelen <jjelen@redhat.com> - 1.3.0-6cO�- Fix for CVE-2022-3515 (#2135695)L��b]? �Daniel Mach <dmach@redhat.com> - 1.3.0-5R�U�- Mass rebuild 2014-01-24L��a]? �Daniel Mach <dmach@redhat.com> - 1.3.0-4R�k�- Mass rebuild 2013-12-27���`�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.0-3Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild[��_[_ �Tomas Mraz <tmraz@redhat.com> - 1.3.0-2P��@- fix multilib conflict in libksba-configH��^[9 �Tomas Mraz <tmraz@redhat.com> - 1.3.0-1P��@- new upstream version���]�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-3P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild���\�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2O �- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_RebuildH��[[9 �Tomas Mraz <tmraz@redhat.com> - 1.2.0-1NJ[�- new upstream version t �Cc� � t ���ii� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��hi�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���gg�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��fg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603^��egY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129W��d_S �Jakub Jelen <jjelen@redhat.com> - 1.3.0-7c��- Fix for CVE-2022-47629 (#2161571) 8 `��" � 8 ^��ogY �Jan Grulich <jgrulich@redhat.com> - 4.11-19-7U�|@- Requires: cpp Resolves: bz#1260129���ni� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���mi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��li� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��ki�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762���ji�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560 � ��1 � ���ti�O �Jan Grulich <jgrulich@redhat.com> - 4.11.19-12Y�@- Make sure that plasma screensaver is not used when previously configured Resolves: bz#1342560���si� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-11Y�- Disable plasma screensaver for security reasons Resolves: bz#1342560�K��ri�/ �Jan Grulich <jgrulich@redhat.com> - 4.11.19-10Y�A@- Fix grouping of tasks in taskmanager applet Resolves: bz#1348917 - Fix unlocking of kscreenlocker, unlock it just once Resolves: bz#1333441���qg�A �Jan Grulich <jgrulich@redhat.com> - 4.11.19-9Y�z�- Fix loading of get hot new stuff for KWin decorations and effects Resolves: bz#1422002�[��pg�Q �Jan Grulich <jgrulich@redhat.com> - 4.11.19-8V�3�- Powerdevil: do not notify about a non existent action Resolves: bz#1289149 - Plasma taskmanager: close context menu when task is closed Resolves: bz#1262603 : NU�: � : r��ze� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���ye�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691���xi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-16_ �@- KSysguard: Increase cpu buffer size in ksysguard Resolves: bz#1856159���wi�5 �Jan Grulich <jgrulich@redhat.com> - 4.11.19-15]�- Fix curly bracket in the patch for Plastik decoration theme Resolves: bz#1779401�t��vi� �Jan Grulich <jgrulich@redhat.com> - 4.11.19-14]H@- Do not show disabled buttons in Plastik decoration theme Resolves: bz#1677641 - Taskmanager: dismiss group when application is closed and there is enough space Resolve: bz#1698048�-��ui�s �Jan Grulich <jgrulich@redhat.com> - 4.11.19-13\b�@- Sanitise notification HTML Resolves: bz#1568853 - Increase cpu buffer size in ksysguard Resolves: bz#1611762 G X�7�C � G z��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��~c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��}c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"��|c�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x�#��{e�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.x Y ���M � Y v��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"��c�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x�#��e�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.xr��e� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���e�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691`��e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277 ~ ��&�& ~ �#��e�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.xr��e� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26��� e�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691`�� e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277z�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase � Y�e�m � � `��e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277z��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Sambav��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"��c�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x C v X�7 � C v�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.4-1[3|@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.3-1Z�- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebasev��c� �Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1Z̧@- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase�"��c�c �Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1Y�M�- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to version 4.7.x�#��e�c �Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1X��@- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to version 4.6.xr��e� �Jakub Hrozek <jhrozek@redhat.com> - 1.1.26-1WYZ@- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26���e�' �Jakub Hrozek <jhrozek@redhat.com> - 1.1.25-1V�b�- Rebase libldb to 1.1.25 - Remove upstreamed patches - Related: rhbz#1322691 _ ��=� _ �(��$W�{ �Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��#W�% �Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��"W� �Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��!Wk �Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)`�� e_ �Andreas Schneider <asn@redhat.com> - 1.5.4-2`Y�@- resolves: #1941511 - Fix CVE-2021-20277z�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1]B�@- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Sambaz�� c� �Jakub Hrozek <jhrozek@redhat.com> - 1.4.2-1\? �- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba E � E ���'W�I �Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��&W�- �Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��%W�c �Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��)W�m �Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��(W�_ �Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��.W�{ �Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��-W�% �Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��,W� �Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��+Wk �Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��*g�# �Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���1W�I �Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��0W�- �Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��/W�c �Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��3W�m �Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��2W�_ �Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��8W�{ �Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��7W�% �Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��6W� �Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��5Wk �Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��4g�# �Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���;W�I �Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��:W�- �Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��9W�c �Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��=W�m �Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��<W�_ �Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ r��@ s��A t��B u��C v��F w��M x��T z��[ {��b |��i }��p ~��w ��~ ��� ��� ��� ��� ���$ ���- ���6 ���? ���H ���Q ���Z ���c ���i ���o ���t ���z ��� ��� ��� ��� ��� ���$ ���' ���) ���. ���1 ���3 ���8 ���; ���= ���B ���E ���G ���K ���R ���X ���^ ���e ���j ���q ���w ���} ��� ��� ��� ��� ��� ���# ���* ���1 ���7 ���> ���E ���K ���R ���Y ���_ ���f ���m ���s ���z ��� � Á� ā� Ł� Ɓ�" ǁ�) ȁ�/ Ɂ�6 ʁ�= ˁ�C ́�J ́�Q �W Ё�^ с�e ҁ�k Ӂ�r ԁ�y Ձ� ց� ׁ� � ف� v �T�# v �(��BW�{ �Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��AW�% �Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��@W� �Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��?Wk �Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��>g�# �Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���EW�I �Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��DW�- �Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��CW�c �Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��GW�m �Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��FW�_ �Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit ^ � ^ �/��Kq�o �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U��- libpcap now correctly recognizes Netlink datalink type (#1031974) - fix vlan tagged packet filtering (#1079525)�u��Jq�{ �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U�@- display also first packet when capturing in cooked mode (#1176612) - make sure that userland bpf filter interpreter is given snaplen such that size of cooked header is account for�&��Iq�] �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}��- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)�D��Hg�# �Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] � _��(�% � � ��Rq�Q �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr���Qq� �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv��PE�) �Michal Ruprich - 14:1.5.3-11Y��- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY��OuA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y��@- Add support for AF_VSOCKX��NsA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y, @- Bound packet size to 64kz��Mq� �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U�@- make sure that sll header size is accounted for (#1176612)� ��Lq�I �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U��- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974) e �r+��V��: � � e D�I � 694e41c94c00e68912502d5f6c5bfde8a366987f5381e5d31b889a6b3928fdf0D�H � 5a66d5d5dc478ed425ac3150ca54707625780a2e26284391fb1ebfb7924f88e9D�G � 31f3f35c713ad4fecb47ca4bfcba6b22a99a0311e91687edac989c0a717ba2ecD�F � 443c9cfc06a5f4f00f7780823a1f4d236782b838c05109edde4737cba50357cbD�E � 0f7c4de217d674dd4adcc5ec84c9df840a974061fb940697d0f1d2c3317bca7dD�D � 8129ad43222a6a88ffa26b7ed5f36d10b1edede7d67aa145c0880eb6d3058828D�C � 199c200e85ae57dc217530a09f2172f136c763583a9869d518e3dd7c2a2f3c24D�B � b64c66f5d35425a886b1afbcf898922915a06a253e4ec2f2efb169f42dea7125D�A � 09936061a18c7bf3b0903e9e1994dca141d245478064ada19312d0d78abe44aeD�@ � ca36fb0f490cdd14f4ed8b6ecf0440998542eaeed3c3985f7357025964231df6D�? � 7631dec5bfc4f885319322ddf28a8c174bd735138c0021a996ea89b80e010ec4D�> � c0a963a27f23cc436b7364ce694e6afe9a0e8d26be17bc8dc816b46fc2e0f261D�= � 0cff7abce034e9ae5e89bd1f5c50241356dd38507e0c53e17d563453b7923822 , U[� � , X��XsA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y, @- Bound packet size to 64kz��Wq� �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U�@- make sure that sll header size is accounted for (#1176612)� ��Vq�I �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U��- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)�/��Uq�o �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U��- libpcap now correctly recognizes Netlink datalink type (#1031974) - fix vlan tagged packet filtering (#1079525)�u��Tq�{ �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U�@- display also first packet when capturing in cooked mode (#1176612) - make sure that userland bpf filter interpreter is given snaplen such that size of cooked header is account for�&��Sq�] �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}��- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096) V �)��P V �u��^q�{ �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U�@- display also first packet when capturing in cooked mode (#1176612) - make sure that userland bpf filter interpreter is given snaplen such that size of cooked header is account for�&��]q�] �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}��- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)� ��\q�Q �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr���[q� �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv��ZE�) �Michal Ruprich - 14:1.5.3-11Y��- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY��YuA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y��@- Add support for AF_VSOCK q L�-�t � q ���eq� �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv��dE�) �Michal Ruprich - 14:1.5.3-11Y��- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY��cuA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y��@- Add support for AF_VSOCKX��bsA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y, @- Bound packet size to 64kz��aq� �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U�@- make sure that sll header size is accounted for (#1176612)� ��`q�I �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U��- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)�/��_q�o �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U��- libpcap now correctly recognizes Netlink datalink type (#1031974) - fix vlan tagged packet filtering (#1079525) a [�� a � ��jq�I �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-7U��- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)�/��iq�o �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6U��- libpcap now correctly recognizes Netlink datalink type (#1031974) - fix vlan tagged packet filtering (#1079525)�u��hq�{ �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5U�@- display also first packet when capturing in cooked mode (#1176612) - make sure that userland bpf filter interpreter is given snaplen such that size of cooked header is account for�&��gq�] �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4T}��- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)� ��fq�Q �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr d �&�O�! d �8��qY� �Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274� ��pq�Q �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-13b \@- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr���oq� �Michal Ruprich <mruprich@redhat.com> - 14:1.5.3-12]8H@- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet dropsv��nE�) �Michal Ruprich - 14:1.5.3-11Y��- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad framesY��muA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-10Y��@- Add support for AF_VSOCKX��lsA �Martin Sehnoutka <msehnout@redhat.com> - 14:1.5.3-9Y, @- Bound packet size to 64kz��kq� �Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-8U�@- make sure that sll header size is accounted for (#1176612) � p�o� � b��w[m �Honggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� ��v[�; �Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��uY�U �Jarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��tY�) �Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��sY� �Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��rY�? �Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426 | q�E� � | x��}Y� �Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��|Y�? �Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��{Y� �Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���z[�O �Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699���y[�C �Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��x[�; �Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482 � {�� � ���[�C �Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� ��[�; �Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b��[m �Honggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� �� [�; �Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585�V��Y�U �Jarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��~Y�) �Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541 > g�� > �V�� Y�U �Jarod Wilson <jarod@redhat.com> 22.4-1]�|@- Update to v22.4 stable release - Support mlx5 scatter to CQE over DCT QP - Fix ibacm segfault on non-IB hardware - Resolves: rhbz#1715489 - Resolves: rhbz#1712296� ��Y�) �Jarod Wilson <jarod@redhat.com> 22.3-1]e@- Update to v22.3 stable release - Unclamp IPoIP MTUs - Resolves: rhbz#1647541x��Y� �Jarod Wilson <jarod@redhat.com> 22.1-3\��- Actually apply ConnectX-6 DX device ID patch - Related: rhbz#1687426� ��Y�? �Jarod Wilson <jarod@redhat.com> 22.1-2\��- Refresh stable-v22 branch fixes - Add ConnectX-6 DX device IDs - Resolves: rhbz#1687426�8��Y� �Jarod Wilson <jarod@redhat.com> 22.1-1\�e�- Update to upstream v22.1 release with stable-v22 branch fixes - Add support for Broadcom 57500 RoCE adapter - Resolves: rhbz#1678274���[�O �Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699 � q |�P � ���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode���[�O �Honggang Li <honli@redhat.com> - 22.4-6`t6@- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs - Resolves: rhbz#1937699��� [�C �Honggang Li <honli@redhat.com> - 22.4-5^ۅ@- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment - Resolves: rhbz#1843221� �� [�; �Honggang Li <honli@redhat.com> - 22.4-4^��- libbnxt_re support for some new device ids and generation id - Resolves: rhbz#1828482b�� [m �Honggang Li <honli@redhat.com> - 22.4-3^��@- Restore three patches - Resolves: rhbz#1817412� �� [�; �Honggang Li <honli@redhat.com> - 22.4-2^M#@- Fix ibacm segfault for dual port HCA support IB and Ethernet - Resolves: rhbz#1793585 * &�%�C � * ���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f�� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���#u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��"w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��!ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���*u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��)u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��(uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��'u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���&u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��%uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��$w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��1u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���0u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��/uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��.w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���-u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��,w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��+ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���7u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��6w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��5ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���4u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��3u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��2uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���>u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��=u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��<uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��;u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���:u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��9uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��8w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Eu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Du� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Cuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Bw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Au�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��@w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��?ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Ku�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Jw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Iui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Hu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Gu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Fuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Qu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Puw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Ou[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Muw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Lw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Yu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Xu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Wuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Vw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Uu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Tw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Sui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D�V � 06027d118bc6eda893d13e73a13e75851e1f01cc10ad76d87de54aa42810f00eD�U � 3f8e4829e35974784aa21e86171e8782ae787788130e87d8098084937f4a1a3bD�T � b508e84aaf73a34f2d109602c78e906df8eb37fed7c853749929b1c52770464fD�S � 8a462bdff8ebc77ce5f8cf6eb1d98625e34218cd0b64485d9b9e6e7837d422f7D�R � c5f6d5239e70240eea7d64dfafd3bbd553f7681f7d2bec1a8ab1298d606ef9d2D�Q � a2fb51336df10bfeae88e811816e04967399b366dd70cde5a7202cbabb4d0a7fD�P � 9b8eaf39c60cfcb55b3c1b2bca5d0dd535225e1dcedf7eeb80d3c1241b9c0478D�O � f6a468589dc2d68540fefdc5fe28df4e741f1d5c46a396376cd5787d8170a88aD�N � 3fd5a3ec93bfb1ba9a34a9f68433573b2a39224e618b9e9c02aed4cb89de5c48D�M � 617e115047b71db008189f9a914bce3674313e8fcd3e3ce40564fe69f65c44e1D�L � 681f9ded8847701dec6bf5ba7ebdeed4dc1b38b39177a2f1e148695f5ee1b1aaD�K � d0502f4f4281f85dbdfa765998b7f3281933945c8291d40a49d1ba948c4c59c6D�J � bc430ed0cfd4a663b76358074912057f989f4af493a6909136e70731ba2358de � ��o�| � ���_u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��^w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��]ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���\u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��[u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Zuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���fu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��eu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��duw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��cu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��auw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��`w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��mu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���lu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��kuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��jw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���iu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��hw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��gui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���su�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��rw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��qui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���pu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��ou�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��nuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��yu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��xuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��wu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��tw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��~w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���}u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��|w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��{ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���"u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��!u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��)u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���(u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��'uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��&w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���%u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��$w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��#ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���/u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��.w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��-ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���,u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��+u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��*uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���6u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��5u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��4uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��3u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���2u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��1uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��0w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��=u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���<u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��;uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��:w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���9u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��8w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��7ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Cu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Bw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Aui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���@u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��?u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��>uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Iu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Huw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Gu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Fu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Euw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Dw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Qu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Pu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Ouw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Nw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Mu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Lw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Kui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Wu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Vw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Uui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Tu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Su�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Ruw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires e �r+��V��: � � e D�c � 3cfeeda763854fb5e06228183bd5e587f1bed1e4d625590a6b4ac06187c951b4D�b � 4e2af30c8cdafabdbbd71cf0b42194118f3297380446e1e39471402c1358b840D�a � d9319fe4e9861108bb5cec23bad9875cac3e057b9ed2a069db7213681942b7d1D�` � 3a9691f067f58e1bce93011bcff272d08b255c1d950fccd1a5aa734d7f8b7050D�_ � 6f58c9c348a9dafbd677a7e56cd3f98765ae140f59756077d92d757199b1200aD�^ � 7cca95dd2bd890021e0f9bf2eaab7788beef2dbb9ef929b7da82f9d98d4b10feD�] � 0b16a6ff0f8a8988e02b31ad560630c7d2fdc9e63b234cc9a39273f3fc61e146D�\ � 73a913f2c7fb75a15cc3b74e08df90f3afc8fe8e36e918044a3fb407b7cf85e4D�[ � bdbf6d455da867729477ffe919b5a9f8f2c11626c5047e6dfe129589a1d1ae99D�Z � 6fb636bf5fc99a0e0e7c9660b447ddb3de9d1e93eab0350986882884d02c9a69D�Y � 446b4bb7e11daeccdf09a55cd6a749365497b1d1ce2addc86246a46f9de47af4D�X � c76608ef79bd1a9fa553bc282e40bd895ee744ac0f6b7a570796bd2bef414ce2D�W � 20865c1814ad86f27c05f9c958a9ea1303c9b5b7762952f4c5f8da12d65f4cce * &�%�C � * ���^u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��]u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��\uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��[u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Yuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Xw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��eu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���du� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��cuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��bw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���au�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��`w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��_ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���ku�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��jw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��iui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���hu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��gu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��fuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��qu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��puw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��ou[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��muw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��lw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��yu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���xu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��wuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��vw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���uu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��tw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��sui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��~w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��}ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���|u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��{u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��zuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f�� u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��!u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���'u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��&w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��%ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���$u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��#u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��"uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���.u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��-u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��,uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��+u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���*u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��)uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��(w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��5u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���4u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��3uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��2w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���1u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��0w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��/ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���;u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��:w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��9ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���8u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��7u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��6uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Au�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��@uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��?u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���>u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��=uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��<w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Iu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Hu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Guw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Fw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Eu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Dw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Cui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Ou�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Nw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Mui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Lu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Ku�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Juw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Uu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Tuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Su[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Quw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Pw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��]u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���\u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��[uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Zw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Yu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Xw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Wui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D�p � b4a38f14218c431d03e34c26a134c609d688ef2c83f268f6867bfb1003efcf2bD�o � 3b84e45c8f431e6aced2faecb97912cb424f0373293013c739154621f571ced8D�n � a2f70fbdd27181bcd656bbd6bb28222e80496a2d4cef2918f74b66e887b0ad68D�m � 851583dc78e98a516586667fe472405624392dbb850b366aac5e87fde83e922eD�l � 6de667e5382d2e35f18b69390c3e03a9e718d8bc403a5db6c6f6072e6bf683c2D�k � 4fb46ce209b71d1437ce790ff6339784632c86ff1c34dc42c88780ecc894575dD�j � dc3a05b48786ae7763cd0966fcd06703e3d056abc82ba14fd98bdd54152fb214D�i � 7cc876a75a07e0764ab0c3b780afa6d07f9464d369cde9a0a7fa0d5514a397e9D�h � 06f1bb2af6f2c2c3b74476a6919d97cc43a92d7d43132345b87af3a3a4aede4bD�g � b3ef87449f22bbc11d2c424b6a59ffecab688a083fb9da993f6d7f4994ad29f6D�f � 8bc7d7a6d1b39eee668c11eb933d1cb38ebd708d11b2c0b2b1a7891e74af0cfbD�e � 4d32b8be0b3416b8c7b225709e77847f3eb420ac65b6a5a1c9c5f7bf13033407D�d � d95478aaa9369b4b49b219aa8aa09278b47ea7f04a2b46280915968e638d861b � ��o�| � ���cu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��bw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��aui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���`u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��_u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��^uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��iu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��huw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��gu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���fu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��euw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��dw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��qu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���pu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��ouw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��nw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���mu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��lw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��kui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���wu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��vw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��uui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���tu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��su�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��ruw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���~u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��}u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��|uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��{u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��yuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��xw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ��� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ��� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���&u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��%u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��$uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��#u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���"u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��!uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��-u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���,u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��+uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��*w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���)u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��(w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��'ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���3u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��2w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��1ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���0u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��/u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��.uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���:u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��9u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��8uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��7u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���6u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��5uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��4w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Au[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���@u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��?uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��>w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���=u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��<w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��;ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Gu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Fw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Eui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Du� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Cu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Buw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Mu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Luw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Ku[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Iuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Hw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Uu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Tu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Suw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Rw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Qu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Pw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Oui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���[u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Zw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Yui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Xu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Wu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Vuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires e �r+��V��: � � e D�} � 324eaa8a27d384658ffb3045f886fe533acdd20ff60a9dad14007b9f07a43205D�| � 8a7f53c7e5c8a77fc603887cb200d840cb724658ff8f2439c41293131f94be82D�{ � 735a91bac6263309ccf5145f1e264cf16d27bec4da5fc2e9ab42e3b055fc46c5D�z � 017388e17ae8a0342ff3283f483c0f92172ac1005e8e97a4c40390e55f78d063D�y � d9ee541fc64d9aeaa99ba6171d9a8585ba8c37d8e288b3c6b029f4a1aa292beeD�x � f7f083c13947185b5768e1f009aec9585e1938f2f714b6fe2248b509babb5dbdD�w � 91b3059cb08a4f72259c6d15febbed4bf315c966b9b48ef63e56b900babbfcbcD�v � 4b8be9f1166188e6844902fa02e3822fd56edbfd5e5043d22efd3d39bd199f57D�u � 04eb35414e82fe2433c837b70edc142805f7455f68f171ad1ea43e534a94de83D�t � b66da86b2643b46bd5d193eebb6f236cfdf753506a9c50caf4ed52fc5bce7172D�s � 51c0c235f8ee720c1949dd34f66d66bf7f5b50fe1c37d366fe724ce644b3bee5D�r � c636f7b1ee487e382b84fc78e7079b3cdcbe8a18b64dbec20379bad79eb119ddD�q � 1a4b2811d9710ab0cbee6c14d0d65efdfcbc1fb050caa3686160958d16c06337 * &�%�C � * ���bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��au�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��`uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��_u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���^u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��]uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��\w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��iu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���hu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��guw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��fw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���eu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��dw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��cui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���ou�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��nw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��mui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���lu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��ku�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��juw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��uu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��tuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��su[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���ru� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��quw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��pw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��}u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���|u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��{uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��zw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���yu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��xw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��wui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��~uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��� u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ��� u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��%u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���$u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��#uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��"w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���!u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���+u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��*w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��)ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���(u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��'u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��&uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���2u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��1u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��0uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��/u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���.u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��-uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��,w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��9u[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���8u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��7uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��6w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���5u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��4w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��3ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���?u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��>w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��=ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���<u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��;u�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��:uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires bR CRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ہ�' ܁�. ݁�5 ށ�; ߁�B ��I ��O ��V ��] ��c ��j ��q ��w ��~ �� �� �� �� �� ��& ��- ��3 ��: ��A ��G ���N ���U ���[ ���b ���i ���o ���v ���} ��� ��� �� �� �� ��% ��+ ��2 ��9 ��? ��F ��M ��S ��Z ��a ��g ��n ��u ��{ �� �� �� �� �� ��# ��* ��1 ��7 ��> ��E ��K ��R ��Y !��_ #��f $��m %��s &��z '�� (�� )�� *�� +�� ,��" -��) .��/ /��6 0��= 1��C 2��J 3��Q 4��W 5��^ 6��e 8��k 9��r :��y ;�� <�� =�� >�� ?�� @��! A��' B��. * &�%�C � * ���Fu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Eu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Duw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Cu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Bu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Auw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��@w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Mu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Lu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Kuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Jw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Iu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Hw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Gui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Su�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Rw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Qui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Pu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Ou�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Nuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Zu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Yu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Xuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Wu[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Vu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Uuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Tw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��au[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���`u� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��_uw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��^w�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���]u�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��\w� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��[ui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D� � a6fbfa63c8d1fd4dd8cfecfeb29858434215394a4e58af6c4ba12e2f82e2a61dD� � 3268b7dcf19f5e3720d65d039632fa15991336537a37e486e37ed194609102b2D� � 2f096012ac594da690f66f1e3c46720188e409c2af7f791c49395822c50dfb6cD� � f138db80a257cdee37382222b7317f2f922c13efffd8d47716c4daff0fb11d68D� � 92b645cab65928cc0f32fe9883d7068564a4040ac0faf35c3ee1790142b461a1D� � f69f263757a6c7fcfc52b278211fe2c2f78f053dfb157200b4e1e1a874b400c2D� � 1fa785144303de32e2279da8e40942e02967bad3724f4de700446c1ac09a1b64D� � 9a48d9a5c8ba240b00760f5cdc0080f6ea8fb38b0f044469b34b8ced3f0be6e9D� � 2e69eeedc5aed03c46ec6f8fd3d7d75c65c5f88aef5cacb89a4b23aa19c92d1dD� � 26284ef9814e9eefa37f15d0dfb0ddab775cc08083594ba1bd43d0b652f61680D� � 0fd4e46db83e6ecf64c063a8c953be3ba857eec99d069a0824fbc7cb3181c25fD� � 61e6d58d8d1b2b2be1f5bb1731c99cf450b81b29303d4f3e1c8772d9b04d2bbdD�~ � 725f41aabdbe0d99f4ff043c8413b75aec1da746d9c27e7540b090a7120002f3 � ��o�| � ���gu�- �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��fw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��eui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���du� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��cu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��buw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���nu� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��mu�' �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��luw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��ku[ �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���ju� �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��iuw �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��hw�5 �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��uu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���tu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��suw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��rw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���qu�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��pw� �Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��oui �Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���{u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��zw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��yui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���xu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��wu�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��vuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���~u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��}uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��|w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f�� u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f�� u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���#u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��"w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��!ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���*u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��)u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��(uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��'u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���&u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��%uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��$w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��1u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���0u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��/uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��.w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���-u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��,w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��+ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���7u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��6w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��5ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���4u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��3u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��2uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���>u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��=u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��<uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��;u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���:u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��9uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��8w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Eu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Du� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Cuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Bw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Au�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��@w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��?ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Ku�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Jw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Iui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Hu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Gu�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Fuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Ru� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Qu�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Puw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Ou[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Nu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Muw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Lw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Yu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Xu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Wuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Vw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Uu�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Tw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Sui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���_u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��^w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��]ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���\u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��[u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Zuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires e �r+��V��: � � e D� � 5b93e870e57b80682109021a45ee40d59a50ca460b054a2fdff648fe118c7ec0D� � 9d8f6d50998e1ddcbcad83e5a929b89aebdccffb0d09afca0a5d451591034494D� � 6db6194f7a398d0d7abc7755a2f9fc2b6887cd20921eaa12f12ae087c8d48816D� � 8c834bac2f30be752f112c1cc6098fa621dd2400df835b51ee13e22bd5c05807D� � 61679ab7934366aedce5be340b71089ee0a1460bac5c95cb884fc6059f1bb7a1D� � a056997b96782b4b457a7404dada83836f46133ac10579459e04c22a64697b3fD� � 27630533e7ce471a5218ba93882e15e857abb3262a57b550aa04a27de283e57aD� � fc0d3c5609c739acc6d67bf0bff0c3ce7d1a05383836701bcb21e55aea34acefD� � e964887b330c27510a0b5b1eb8c31a8c5eda05bde74e42a145bea54bb240d335D� � f6f4af57d47fdebdd0de45acce2777a89181f31063e8511ded23c672de57fe99D� � 22218edd785c94ee6fbbe5ded89195ece5e0450abc17b7afb225b4677b79f3f1D� � 1c826c2145a30350f476ab5a9a6151bd349415c6cab19956813fffb3b864a331D� � 4016c342a85401eac37beabfbb025c514e077802555e329f3f4a77d1a835864f * &�%�C � * ���fu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��eu�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��duw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��cu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���bu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��auw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��`w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��mu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���lu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��kuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��jw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���iu�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��hw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��gui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���su�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��rw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��qui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���pu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��ou�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��nuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���zu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��yu�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��xuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��wu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���vu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��tw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��~w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���}u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��|w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��{ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�� u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���"u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��!u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�� u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��)u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���(u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��'uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��&w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���%u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��$w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��#ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���/u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��.w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��-ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���,u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��+u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��*uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���6u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��5u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��4uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��3u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���2u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��1uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��0w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��=u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���<u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��;uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��:w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���9u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��8w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��7ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Cu�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Bw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Aui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���@u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��?u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��>uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Ju� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Iu�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Huw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Gu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Fu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Euw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Dw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Qu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Pu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Ouw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Nw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Mu�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Lw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Kui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Wu�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Vw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Uui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Tu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Su�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Ruw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���^u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��]u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��\uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��[u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Zu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Yuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Xw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��eu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���du� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��cuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��bw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���au�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��`w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��_ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D�$ � a03be94a199377cb1c5614368a415c0540f04e2d6bc74e7bfbe1a1dd0c525128D�# � dc5b0b3c78dcae2b3bf5f5c9dcbcf24534372b9e13c9464c300a0017948eaf99D�" � 2663e6a78d254c25af0632b96caa6ae85c1a93cf308dc522b9e8bfaa334d9f2eD�! � 1cb47e9ddc0c4d017161325b321b5a50d4645ac07758b0d9cc09ce6180bce014D� � 15dbef5a2991f085e58a23e6a7047ea54e528a6f93b07a28839c0b6e3ed48c5eD� � f062b9d33e6eee164c17233ffc747844edad4fb3865de2b1c409d81837aff544D� � 1563224cd55060ababda0629baf763138a4b5c22b82b6494721b272e3e38a000D� � c1d7e786bf4c095d0ce6ba44863e3fa1e5626c2c14307901e7bcd56c8a589876D� � 36100cd15f92cdafbc93a99d22267147437baa08033156354f656dfc64b59e9eD� � 30d47ccf8c6af77d81b8e9bb9bbeb51114e301cd9a47a8f37a3077a6b1bb08a8D� � 6251257e2c5253fdfcba671ae6cb37b06e73d7cd02051442ae5fe2d66a63df83D� � bd4f5d655ba5a25030d453a042ac28a2d723812f5dde3bd8ab1a817e87237f97D� � b6052b91db5ed4e063fd850d975d05689cc9b1996c06638c4d251659b128c9ac � ��o�| � ���ku�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��jw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��iui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���hu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��gu�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��fuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���ru� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��qu�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��puw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��ou[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���nu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��muw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��lw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��yu[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���xu� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��wuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��vw�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���uu�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��tw� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��sui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��~w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��}ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���|u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��{u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��zuw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f�� u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��� u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��!u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��� u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���'u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��&w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��%ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���$u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��#u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��"uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���.u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��-u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��,uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��+u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���*u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��)uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��(w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��5u[ Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���4u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��3uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��2w�5 Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���1u�- Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��0w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��/ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���;u�- !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��:w� Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��9ui Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���8u� Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��7u�' Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��6uw Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Bu� !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Au�' !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��@uw !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��?u[ !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���>u� !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��=uw !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��<w�5 !Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Iu[ "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Hu� "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Guw "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Fw�5 "Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Eu�- "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Dw� !Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Cui !Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Ou�- #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Nw� "Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Mui "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Lu� "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Ku�' "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Juw "Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Vu� #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Uu�' #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Tuw #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Su[ #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Ru� #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Quw #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Pw�5 #Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��]u[ $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���\u� $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��[uw $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Zw�5 $Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Yu�- $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Xw� #Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Wui #Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���cu�- %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��bw� $Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��aui $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���`u� $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��_u�' $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��^uw $Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires e �r+��V��: � � e D�1 � 946e0d4202b53b3b065d23a43e6a5a0a32f61836c1b7305ec2a65d63b2fa48d0D�0 � 400558346b5b54b33a80390a5849a1a330722cdff9436c07acf3e168b477330eD�/ � fb54396129c15361020a0307c4dd42f46da87f1c0a0841e0d0ee3ee404ce59bdD�. � 353fc523cad5efc4cbbcfc1283eb522f0f97dcaeacf8fed02b5b71b895fe4f26D�- � 80390bf3a08ba0f650c404d34722110ba6e30e0aa373d82bb1bc2d8d2d7d31baD�, � 1dcf380a319a132c90457bf82f10d67e9fb2f0795535e4a430c15eba981edeefD�+ � 8090afe9c1843d71bfe8d10d6b4076aea3559e86d8fa4c232dee54817c5b76fbD�* � 3650ca3ecdb13198b3e14e49b52b7dd911c3839ba77826f5b2dbd315026cc82fD�) � cdfa438ee0d5eaf9ebf066c879fea0ad0e14ef3381353d9d8a8f249ff220b2afD�( � 08fe4123c9f2d5699c800a7e884d1f8f6958f6ec8448ac152f214735fd9ba5f9D�' � 4598ab08f211c59a2ee7f9d85a2e2c7a4f7b8845e0d7ac7dbfbb570230111cf0D�& � d04f4f2c802e659ebc50e30c425e08c36096ac47223dc795afdd8d19c31aeed9D�% � 0f9b27fa945a2929eef54b26fe1fa8010d7cbd461cd3c645fb8cc62de85d5a8b * &�%�C � * ���ju� %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��iu�' %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��huw %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��gu[ %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���fu� %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��euw %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��dw�5 %Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��qu[ &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���pu� &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��ouw &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��nw�5 &Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���mu�- &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��lw� %Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��kui %Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���wu�- 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��vw� &Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��uui &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���tu� &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��su�' &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��ruw &Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���~u� 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��}u�' 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��|uw 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��{u[ 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���zu� 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��yuw 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��xw�5 'Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 (Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� 'Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui 'Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ��� u�- )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� (Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw (Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 )Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 *Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� )Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui )Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ��� u�- +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� *Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw *Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���&u� +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��%u�' +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��$uw +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��#u[ +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���"u� +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��!uw +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 +Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��-u[ ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���,u� ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��+uw ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��*w�5 ,Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���)u�- ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��(w� +Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��'ui +Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���3u�- -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��2w� ,Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��1ui ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���0u� ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��/u�' ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��.uw ,Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���:u� -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��9u�' -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��8uw -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��7u[ -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���6u� -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��5uw -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��4w�5 -Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Au[ .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���@u� .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��?uw .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��>w�5 .Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���=u�- .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��<w� -Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��;ui -Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Gu�- /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Fw� .Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Eui .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Du� .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Cu�' .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Buw .Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Nu� /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Mu�' /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Luw /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Ku[ /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Ju� /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Iuw /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Hw�5 /Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Uu[ 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Tu� 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Suw 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Rw�5 0Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Qu�- 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Pw� /Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Oui /Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���[u�- 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Zw� 0Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Yui 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Xu� 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Wu�' 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Vuw 0Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���bu� 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��au�' 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��`uw 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��_u[ 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���^u� 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��]uw 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��\w�5 1Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��iu[ 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���hu� 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��guw 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��fw�5 2Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���eu�- 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��dw� 1Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��cui 1Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D�> � 9a8b2db0e1457c3d413a7d5db0d2a07fe70d2fe34918a818a9527c1bd851cf8eD�= � af747123a2f728bd5d30f3f31cf5d5124a9fa4ba4105764cf89594dde7453727D�< � d60af5df8c01a193097c36e1ec5c7d66f470b5c9f4400ee4e1e714397de12e81D�; � f818d743b3ac159c87610d03230aad3b70743afe5fc38d30a3aac4ab50db977eD�: � ff32b3ca928a0d84d11d5efe9433ba05d661f2a1df648fe6eee586eb09c24ac6D�9 � 72598a2a7205cad8abd1c6adb36033bebbb72e0537e83288ff0a562511b5e061D�8 � beaba5748ba50e7e5eb175940f2356990aa23d1176560268068ee630c38f3953D�7 � e71a307c1ef8b62e83a97e331815cedb4e6c75a9c53468d64a42013fc4038c08D�6 � 70ab660529559dbc0857824877d03fb7953ba5e86fde837ba44bd5f6d5ee3adfD�5 � 95534a4322ef4fc7dfa9b623b1de5cd5d0d72c43f81f18b07d085100fc928858D�4 � e81e2d49de42c4084b831416da43610e82111f1e2bf57b09c2cfecdedc32e6d9D�3 � 033cc5d8ff989f638033f0a6af82cb11c2d68d26fc602668a0a4c9673a09ef9cD�2 � 34269e92e56a1ed2e47570b48ed01530719dca4cb561baa301db389d679afdb1 � ��o�| � ���ou�- 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��nw� 2Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��mui 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���lu� 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��ku�' 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��juw 2Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���vu� 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��uu�' 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��tuw 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��su[ 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���ru� 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��quw 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��pw�5 3Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��}u[ 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���|u� 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��{uw 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��zw�5 4Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���yu�- 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��xw� 3Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��wui 3Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� 4Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��~uw 4Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ��� u� 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 5Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 6Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog��� u�- 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� 5Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui 5Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� 6Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw 6Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ��� u� 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 7Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��%u[ 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���$u� 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��#uw 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��"w�5 8Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���!u�- 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~�� w� 7Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui 7Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���+u�- 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��*w� 8Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��)ui 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���(u� 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��'u�' 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��&uw 8Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���2u� 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��1u�' 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��0uw 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��/u[ 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���.u� 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��-uw 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��,w�5 9Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��9u[ :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���8u� :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��7uw :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��6w�5 :Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���5u�- :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��4w� 9Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��3ui 9Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���?u�- ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��>w� :Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��=ui :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���<u� :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��;u�' :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��:uw :Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Fu� ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Eu�' ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Duw ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Cu[ ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Bu� ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Auw ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��@w�5 ;Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Mu[ <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Lu� <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Kuw <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Jw�5 <Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Iu�- <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Hw� ;Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Gui ;Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Su�- =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Rw� <Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Qui <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Pu� <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Ou�' <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Nuw <Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ D��; E��B F��I G��O H��V I��] J��c L��j M��q N��w O��~ P�� Q�� R�� S�� T�� U��& V��- W��3 X��: Y��A Z��G [��N \��U ]��[ ^��b _��i a��o b��v c��} d�� e�� f�� g�� h�� i��% j��+ k��2 l��9 m��? n��F o��M p��S r��Z s��a t��g v��n w��u x��{ y�� z�� {�� |�� }�� ~��# ��* ���1 ���7 ���> ���E ���K ���R ���Y ���_ ���f ���m ���s ���z ��� ��� ��� ��� ��� ���" ���) ���/ ���6 ���= ���C ���J ���Q ���W ���Y ���[ ���] ���^ ���` ���c ���e ���g ���h ���j ���m ���o ���q ���r ���t ���w * &�%�C � * ���Zu� =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Yu�' =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Xuw =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Wu[ =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Vu� =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Uuw =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Tw�5 =Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��au[ >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���`u� >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��_uw >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��^w�5 >Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���]u�- >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��\w� =Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��[ui =Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���gu�- ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��fw� >Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��eui >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���du� >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��cu�' >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��buw >Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires e �r+��V��: � � e D�K � 9313b35402e85897b582429f4df8f344b42d30cec4731079c2c5f5a680fcc839D�J � ec25d05d782c32b42db9e24ba4c9449d7fc9c689e3d0fa711ce8f94c261ce6b7D�I � 2c6bfa0e8aa6838cc1b81537932ca579cbd93cc93d440a8a7c84b5342ca0a123D�H � 598f5c1de287046f5cbd57cfaf3cc1d9daa8acbbcfe94363eda1070339b435a8D�G � 73a833b69925445587e5e902cf5b0432e6cdf5d8c184064ea6f735ed11d28452D�F � 5df62ba637b7f77964da2d97a25f63cdec28f90a8dfa76b05a4080f7aa03b3a2D�E � 73e6c1345f450c5929eb00e5f4f97abca74086756ad6e3bd8c36e85d989c8283D�D � 4a1f2f949b103bdfe54eebc6b4963f047de93b1a0cc47cfa795070d2edcf457dD�C � 73e7e5f1dff51614ddae5538cafc528cb724c6dcfb3a9b9459be4d82230e5160D�B � f1f8e68da43d3543c537c23e696bea84b8c7e225d2a8e638f1d3e6b4c768f286D�A � ecb37964581de31750352b4a0c77e2efd6f71b55d33d488cc7d2460a0a00d744D�@ � cd9f701311cf726c8b434a5ee4f0f2cb6e0df53b5a843c3ce0633217921b81dbD�? � 545b84aca9e92f936ab9998e50b8f869519ed25a9b0ab3b228ca86046f34160e * &�%�C � * ���nu� ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��mu�' ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��luw ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��ku[ ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���ju� ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��iuw ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��hw�5 ?Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��uu[ @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���tu� @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��suw @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��rw�5 @Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���qu�- @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��pw� ?Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��oui ?Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���{u�- ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��zw� @Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��yui @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���xu� @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��wu�' @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��vuw @Caolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���~u� ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��}uw ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��|w�5 AStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f�� u[ BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 BStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� AStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui ACaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� BStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm�� ui BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw BCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��u[ CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 CStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f�� u[ DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 DStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� CStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui CCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���#u�- ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��"w� DStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��!ui DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black��� u� DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw DCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���*u� ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��)u�' ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��(uw ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��'u[ ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���&u� ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��%uw ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��$w�5 EStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��1u[ FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���0u� FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��/uw FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��.w�5 FStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���-u�- FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��,w� EStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��+ui ECaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���7u�- GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��6w� FStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��5ui FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���4u� FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��3u�' FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��2uw FCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���>u� GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��=u�' GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��<uw GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��;u[ GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���:u� GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��9uw GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��8w�5 GStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Eu[ HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Du� HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Cuw HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Bw�5 HStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Au�- HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��@w� GStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��?ui GCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Ku�- ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Jw� HStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Iui HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Hu� HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Gu�' HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Fuw HCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Ru� ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Qu�' ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Puw ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Ou[ ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Nu� ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Muw ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Lw�5 IStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Yu[ JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Xu� JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Wuw JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Vw�5 JStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Uu�- JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Tw� IStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Sui ICaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���_u�- KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��^w� JStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��]ui JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���\u� JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��[u�' JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Zuw JCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���fu� KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��eu�' KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��duw KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��cu[ KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���bu� KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��auw KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��`w�5 KStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��mu[ LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���lu� LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��kuw LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��jw�5 LStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���iu�- LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��hw� KStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��gui KCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black e �r+��V��: � � e D�X � 1eb2e0f2ab532fc7491714b9d8dae34bf6977843c4b9649fe0509d2fc7dc3b59D�W � 8a0bacc73339833881bc5ae7fa62eafa7a9c0011b40065f3a69fb02d298f29d6D�V � 8ba208735c422fc7201d30c4eee2567d7d1db7cfe28590c93e563015db58818bD�U � b4a0638e6c66b83b32396e053b68f71ce9f9c0846f117e75c3223af733c923b9D�T � 08d1d1cc28a0a4caf172ffb26c59f35532cb13b37543dc1b44895666f5c4d486D�S � 2cc2e0d90af5e45dd0446328fe940a605fcb5aeaa3c115959be8469b6f134c83D�R � 614857c396c65004fd986e7b0b3b669ea5f8880fc93c655a69ea8ff5177d58fbD�Q � cd15c26fb1146a5e8fc006618f54a1857a651b59524ad0b43e2de55f2ecdf4adD�P � 1627c36660c246a28b1b4c12b7bb6265a2948ecc122efd459f7d3a78959935e7D�O � d00284a41b68e575da476321841fba290849066dcd50949ee1f46e5984294f6aD�N � b5962c01ec97042d7aa371253ae592a53b11214605721063be11027949cd9ee6D�M � b47475049748725638cfe057a54b45b2386eb621ed65e7dc441b3f6dff971e60D�L � 11476c0df825b8cf64558132ab6c00817fd04a45533f011c2784f1a0df797631 � ��o�| � ���su�- MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��rw� LStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��qui LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���pu� LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��ou�' LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��nuw LCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���zu� MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��yu�' MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��xuw MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��wu[ MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���vu� MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uuw MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��tw�5 MStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��~w�5 NStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���}u�- NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��|w� MStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��{ui MCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� NStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw NCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���u� OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� �� u�' OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�� u[ OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 OStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��u[ PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���u� PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��uw PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��w�5 PStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���u�- PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� OStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui OCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���u�- QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��w� PStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��ui PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���u� PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��u�' PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��uw PCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���"u� QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��!u�' QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t�� uw QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf�� u[ QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858��� u� QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt�� uw QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U�� w�5 QStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��)u[ RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���(u� RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��'uw RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��&w�5 RStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���%u�- RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��$w� QStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��#ui QCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���/u�- SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��.w� RStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��-ui RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���,u� RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��+u�' RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��*uw RCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���6u� SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��5u�' SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��4uw SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��3u[ SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���2u� SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��1uw SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��0w�5 SStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��=u[ TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���<u� TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��;uw TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��:w�5 TStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���9u�- TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��8w� SStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��7ui SCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black � ��o�| � ���Cu�- UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Bw� TStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Aui TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���@u� TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��?u�' TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��>uw TCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires * &�%�C � * ���Ju� UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Iu�' UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Huw UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requiresf��Gu[ UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Fu� UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Euw UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Dw�5 UStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog 3 � x�& � 3 f��Qu[ VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-20\X)@- Resolves: rhbz#1672003 CVE-2018-16858���Pu� VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-19[m~@- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPSt��Ouw VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-18[dC�- Resolves: rhbz#1610904 draw glitches in drag cursor�U��Nw�5 VStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17[a��- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash - Resolves: rhbz#1610692 silence console warnings from print dialog���Mu�- VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-16[ d@- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode~��Lw� UStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Kui UCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black $ ��o�|$ T��WkA WTomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-2T��- Make tests port agnostic~��Vw� VStephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-25_�0@- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendorm��Uui VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-24]�)�- Resolves: rhbz#1728763 bg of blocks is black���Tu� VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-23]v>�- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck� ��Su�' VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-22]rJ@- Resolves: rhbz#1743962 CVE-2019-9848 - Resolves: rhbz#1743954 CVE-2019-9849t��Ruw VCaolán McNamara <caolanm@redhat.com> - 1:5.3.6.1-21\n��- Resolves: rhbz#1066844 drop libreofficekit requires � �t��Yk� WTomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1T�7�- Fix ABI compatibility (RhBug: 1185180) - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998) - Make building tests and docs optional - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)�i��Xk�i WTomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1T��@- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685) - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685) - downloader: Show also calculated checksums in error message about bad checksum - Python: Return all strings in unicode a � a j��[km WTomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-2T�A- compat: fix ck_assert_msg() segfault in rhel-7�,��Zk�o WTomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1T�@- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43) - Add LRO_OFFLINE - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified - Add LR_VERSION constant with version string - python: Import contants from C librepo module in a loop - repoconf: Add support for failover and skip_if_unavailable options - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600) - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600) - util: Add lr_is_local_path() - New module repoconf for reading *.repo files - Add LRO_HTTPHEADER option (RhBug: 1181123) � �� ���]g�C WColin Walters <walters@redhat.com> - 1.7.15-2UQ�@- Disable tests and drop python-flask build dependency on RHEL7, as it is not in the core�s��\k�} WTomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1U-@- Do not inlude header in the body output (RhBug: 1207685) - metalink: Proper error handling - New LRR_RPMMD_* contants - Support for client certificates - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51) - CMakeLists.txt: do not check for CXX - build: Use solely pkg-config to find glib . . �M��^g�5 WColin Walters <tmlcoch@redhat.com> - 1.7.16-1UhT�- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817) - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471) - repoconf: Proper handling of gint64 and guint64 types - build: Be compatible with cmake 2.8 - handle: Do not free temporary error msg if there is no one (RhBug: 1219822) - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49) - Python: call lr_global_init() during module initialization - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53) - util: Honor RFC 3986 (Issue #55) J � J i��`]y WAles Matej <amatej@redhat.com> - 1.8.1-8_5+@- Validate paths read from repomd.xml (RhBug: 1866500)�D��__�+ WMarek Blaha <mblaha@redhat.com> - 1.8.1-1[o�- Add yumrecord substitution mechanism (mluscon) - Fix a memory leak in signature verification (cwalters) - Add new option LRO_FTPUSEEPSV - downloader prepare_next_transfer(): simplify long line - downloader prepare_next_transfer(): add missing error check - downloader prepare_next_transfer(): cleanup error path - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins) - handle: Don't use proxy cache for downloads of metalink/mirrorlist - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762) - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new() - New test: always try to download from the fastest mirror (Alexander Todorov) � �: � �t��ck� XTomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1T�7�- Fix ABI compatibility (RhBug: 1185180) - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998) - Make building tests and docs optional - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)�i��bk�i XTomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1T��@- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685) - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685) - downloader: Show also calculated checksums in error message about bad checksum - Python: Return all strings in unicodeT��akA XTomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-2T��- Make tests port agnostic a � a j��ekm XTomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-2T�A- compat: fix ck_assert_msg() segfault in rhel-7�,��dk�o XTomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1T�@- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43) - Add LRO_OFFLINE - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified - Add LR_VERSION constant with version string - python: Import contants from C librepo module in a loop - repoconf: Add support for failover and skip_if_unavailable options - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600) - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600) - util: Add lr_is_local_path() - New module repoconf for reading *.repo files - Add LRO_HTTPHEADER option (RhBug: 1181123) � �� ���gg�C XColin Walters <walters@redhat.com> - 1.7.15-2UQ�@- Disable tests and drop python-flask build dependency on RHEL7, as it is not in the core�s��fk�} XTomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1U-@- Do not inlude header in the body output (RhBug: 1207685) - metalink: Proper error handling - New LRR_RPMMD_* contants - Support for client certificates - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51) - CMakeLists.txt: do not check for CXX - build: Use solely pkg-config to find glib . . �M��hg�5 XColin Walters <tmlcoch@redhat.com> - 1.7.16-1UhT�- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817) - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471) - repoconf: Proper handling of gint64 and guint64 types - build: Be compatible with cmake 2.8 - handle: Do not free temporary error msg if there is no one (RhBug: 1219822) - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49) - Python: call lr_global_init() during module initialization - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53) - util: Honor RFC 3986 (Issue #55) J � J i��j]y XAles Matej <amatej@redhat.com> - 1.8.1-8_5+@- Validate paths read from repomd.xml (RhBug: 1866500)�D��i_�+ XMarek Blaha <mblaha@redhat.com> - 1.8.1-1[o�- Add yumrecord substitution mechanism (mluscon) - Fix a memory leak in signature verification (cwalters) - Add new option LRO_FTPUSEEPSV - downloader prepare_next_transfer(): simplify long line - downloader prepare_next_transfer(): add missing error check - downloader prepare_next_transfer(): cleanup error path - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins) - handle: Don't use proxy cache for downloads of metalink/mirrorlist - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762) - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new() - New test: always try to download from the fastest mirror (Alexander Todorov) e �r+��V��: � � e D�e � e28f306d4893ec7a68589345b053be93e9d807543f263f0bbfd81eacefbc4c10D�d � 07502ee4563c4bdc09b8d0b67eba7577aae0d6c871501af53b038aad8812d391D�c � 71f4e4bdc94d32ca413c40fe3666b5b8b0a092fc42d58ea96801a440297da553D�b � 7c1cc6ce8c70a7a3b07d877d8ba90c49382b8945d6695e986df3f69e3b59cc32D�a � 25fa10449317511df1bc80c25c0cc1e7bede87a02929b5c0676ce9957353a8d9D�` � baa1991d1849681ae5e74f8eeb2d213f69221f0c76cbe0018df32bd8f5ec1cb6D�_ � 0d2b3fa57c857e63e2bc038eba8140a308abe22d4261989634084fe5e9eb73bdD�^ � b0ddff8c5c64edbfff1b2f8f18cc330688586e6a01207ad39c6c30bbeffe82fbD�] � 8bb27e3133d87750b1501993b54e0bc9006242f30c7f46e98b7e0bc0a450cf2fD�\ � a9491aa4d8fe481a24a189a9849cfe530d5eaeb3550b1364284bf6b8b7a5a76bD�[ � c205e6c8f267b531e6cb7cdabe53c2b3cda12f1afd4735ece2a55f5c116d0159D�Z � dd5402f5bb60ada1db63c1305e3650e8804adcacfb1557affb8623621fd83155D�Y � 6263d570ddf0f6cf0247a3e7266a7aa7caae795462727dbb4d747261bc4aa1be � �: � �t��mk� YTomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1T�7�- Fix ABI compatibility (RhBug: 1185180) - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998) - Make building tests and docs optional - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)�i��lk�i YTomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1T��@- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685) - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685) - downloader: Show also calculated checksums in error message about bad checksum - Python: Return all strings in unicodeT��kkA YTomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-2T��- Make tests port agnostic a � a j��okm YTomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-2T�A- compat: fix ck_assert_msg() segfault in rhel-7�,��nk�o YTomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1T�@- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43) - Add LRO_OFFLINE - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified - Add LR_VERSION constant with version string - python: Import contants from C librepo module in a loop - repoconf: Add support for failover and skip_if_unavailable options - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600) - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600) - util: Add lr_is_local_path() - New module repoconf for reading *.repo files - Add LRO_HTTPHEADER option (RhBug: 1181123) � �� ���qg�C YColin Walters <walters@redhat.com> - 1.7.15-2UQ�@- Disable tests and drop python-flask build dependency on RHEL7, as it is not in the core�s��pk�} YTomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1U-@- Do not inlude header in the body output (RhBug: 1207685) - metalink: Proper error handling - New LRR_RPMMD_* contants - Support for client certificates - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51) - CMakeLists.txt: do not check for CXX - build: Use solely pkg-config to find glib . . �M��rg�5 YColin Walters <tmlcoch@redhat.com> - 1.7.16-1UhT�- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817) - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471) - repoconf: Proper handling of gint64 and guint64 types - build: Be compatible with cmake 2.8 - handle: Do not free temporary error msg if there is no one (RhBug: 1219822) - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49) - Python: call lr_global_init() during module initialization - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53) - util: Honor RFC 3986 (Issue #55) J � J i��t]y YAles Matej <amatej@redhat.com> - 1.8.1-8_5+@- Validate paths read from repomd.xml (RhBug: 1866500)�D��s_�+ YMarek Blaha <mblaha@redhat.com> - 1.8.1-1[o�- Add yumrecord substitution mechanism (mluscon) - Fix a memory leak in signature verification (cwalters) - Add new option LRO_FTPUSEEPSV - downloader prepare_next_transfer(): simplify long line - downloader prepare_next_transfer(): add missing error check - downloader prepare_next_transfer(): cleanup error path - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins) - handle: Don't use proxy cache for downloads of metalink/mirrorlist - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762) - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new() - New test: always try to download from the fastest mirror (Alexander Todorov) � �: � �t��wk� ZTomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1T�7�- Fix ABI compatibility (RhBug: 1185180) - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998) - Make building tests and docs optional - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)�i��vk�i ZTomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1T��@- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685) - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685) - downloader: Show also calculated checksums in error message about bad checksum - Python: Return all strings in unicodeT��ukA ZTomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-2T��- Make tests port agnostic a � a j��ykm ZTomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-2T�A- compat: fix ck_assert_msg() segfault in rhel-7�,��xk�o ZTomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1T�@- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43) - Add LRO_OFFLINE - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified - Add LR_VERSION constant with version string - python: Import contants from C librepo module in a loop - repoconf: Add support for failover and skip_if_unavailable options - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600) - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600) - util: Add lr_is_local_path() - New module repoconf for reading *.repo files - Add LRO_HTTPHEADER option (RhBug: 1181123) � �� ���{g�C ZColin Walters <walters@redhat.com> - 1.7.15-2UQ�@- Disable tests and drop python-flask build dependency on RHEL7, as it is not in the core�s��zk�} ZTomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1U-@- Do not inlude header in the body output (RhBug: 1207685) - metalink: Proper error handling - New LRR_RPMMD_* contants - Support for client certificates - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51) - CMakeLists.txt: do not check for CXX - build: Use solely pkg-config to find glib . . �M��|g�5 ZColin Walters <tmlcoch@redhat.com> - 1.7.16-1UhT�- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817) - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471) - repoconf: Proper handling of gint64 and guint64 types - build: Be compatible with cmake 2.8 - handle: Do not free temporary error msg if there is no one (RhBug: 1219822) - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49) - Python: call lr_global_init() during module initialization - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53) - util: Honor RFC 3986 (Issue #55) J � J i��~]y ZAles Matej <amatej@redhat.com> - 1.8.1-8_5+@- Validate paths read from repomd.xml (RhBug: 1866500)�D��}_�+ ZMarek Blaha <mblaha@redhat.com> - 1.8.1-1[o�- Add yumrecord substitution mechanism (mluscon) - Fix a memory leak in signature verification (cwalters) - Add new option LRO_FTPUSEEPSV - downloader prepare_next_transfer(): simplify long line - downloader prepare_next_transfer(): add missing error check - downloader prepare_next_transfer(): cleanup error path - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins) - handle: Don't use proxy cache for downloads of metalink/mirrorlist - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762) - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new() - New test: always try to download from the fastest mirror (Alexander Todorov) + l& � + �+��c�u [Paul Wouters <pwouters@redhat.com> - 3.25-2[:�- Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors�F��c�+ [Paul Wouters <pwouters@redhat.com> - 3.25-1[3|@- Resolves: rhbz#1591817 rebase libreswan to 3.25 - Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated - Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6�A�� c�! [Paul Wouters <pwouters@redhat.com> - 3.23-4Z��- Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated - Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted - Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues���c�= [Paul Wouters <pwouters@redhat.com> - 3.23-3Zz�@- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update] 0 T 0 � ��c�] [Paul Wouters <pwouters@redhat.com> - 3.25-6\X)@- Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated] - Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure�'��c�m [Paul Wouters <pwouters@redhat.com> - 3.25-5\�@- Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N - Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC - Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11 - Resolves: rhbz#1625303 config: recursive include check doesn't work - Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits � P��r � k�� W� \Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_�� Wk \Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)x��g� [Paul Wouters <pwouters@redhat.com> - 3.25-9.1^�@- Resolves: rhbz#1844621 Backport FIPS keysize fixes from RHEL8�0��c� [Paul Wouters <pwouters@redhat.com> - 3.25-9]c�- Resolves: rhbz#1724200 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire�(��c�o [Paul Wouters <pwouters@redhat.com> - 3.25-8\�s@- Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE�+��c�u [Paul Wouters <pwouters@redhat.com> - 3.25-7\v{�- Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart � >� � �\�� W�c \Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev�(�� W�{ \Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=�� W�% \Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failed G �& G �Z��W�_ \Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit���W�I \Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��W�- \Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information = �n � = �=��W�% ]Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��W� ]Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��Wk ]Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��g�# \Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]�a��W�m \Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory , Sr , �A��W�- ]Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��W�c ]Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev�(��W�{ ]Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login � l� � �a��W�m ]Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��W�_ ]Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit���W�I ]Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent. v �T�# v �(�� W�{ ^Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=�� W�% ^Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk�� W� ^Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_�� Wk ^Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D�� g�# ]Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���#W�I ^Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��"W�- ^Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��!W�c ^Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��%W�m ^Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��$W�_ ^Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��*W�{ _Karel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��)W�% _Karel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��(W� _Karel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��'Wk _Karel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��&g�# ^Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���-W�I _Karel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��,W�- _Karel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��+W�c _Karel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��/W�m _Karel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��.W�_ _Karel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit 3 �K�( � 3 w��5k� `Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��4k� `Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��3ii `Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3��2k�} `Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��1ik `Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16�D��0g�# _Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] � � � ���9k� `Andreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���8k�% `Andreas Schneider <asn@redhat.com> - 4.10.17-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��7iq `Andreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p��6i�y `Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � zV�q � w��?k� aIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��>k� aIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��=ii aAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3��<k�} aIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��;ik aAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16���:k� `Andreas Schneider <asn@redhat.com> - 4.10.17-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ���Ck� aAndreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���Bk�% aAndreas Schneider <asn@redhat.com> - 4.10.17-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��Aiq aAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p��@i�y aAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage % z� % �p��Hi�y bAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew��Gk� bIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��Fk� bIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��Eii bAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires���Dk� aAndreas Schneider <asn@redhat.com> - 4.10.17-13`�@- related: #1876839 - Fix double crash when requesting share mode lock 1 �~� � 1 g��Oii cAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requiresc��Nk_ bAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��Mk�w bAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���Lk� bAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���Kk� bAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���Jk�% bAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��Iiq bAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks � � ���Tk�% cAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��Siq cAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��Ri�y cAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew��Qk� cIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��Pk� cIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DC y��� w��Yk� dIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagc��Xk_ cAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��Wk�w cAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���Vk� cAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���Uk� cAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock � � � ���]k� dAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���\k�% dAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��[iq dAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��Zi�y dAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage P z� I � P w��ck� eIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagz��bk� dAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��ak�7 dAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��`k_ dAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��_k�w dAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���^k� dAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ���gk� eAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���fk�% eAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��eiq eAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��di�y eAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � z� I � z��lk� eAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��kk�7 eAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��jk_ eAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��ik�w eAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���hk� eAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock e �r+��V��: � � e D�r � 9ce18db0c7edcdf3961e7086a8438b700e7bb5f91d89a4bca5049729c6b02228D�q � 862a87260cad27824364c01e25cd821b1fc2a084f3522fee0b5654d684839796D�p � 6d16c50325196936545ac4cbb31f743a7fdab2589124f05cedf47845149e1035D�o � c072f12110aa95c982d941e51b30f703d3010b75f805ba9c70e921f74a87e54fD�n � 51252d279ae23e76f0eab56a60f8b34948a2cb91859a5ebcb4dd70f5b140ade0D�m � 948dd58b9aa2d3fe20747516b2640cf6b85bdabed1557859baee0cec0fa8a25cD�l � 10b16b350ee16d3d6b97cb71b8b4c1f23359036277bb481e4ccc7cd698d26ed4D�k � 6c72e414ed7ca2608725b7230e3820171e7ceca0b47d1c5a4623b22e410f9c5eD�j � 9f70940adeedfa2ad404110adcb36a268faa97569dc2fc32c100eab4368a9c54D�i � a941b5ad075b2f47806bea28420794a24bc7fb5373b6712a5d0b500ee6118759D�h � e7aab445dd74ec3ddd4f7504b5e00f8b2f7024c95448fb6ee6de759e0517cac4D�g � c57edeef8ad80c1218e8f3c5f03298b8e4c78de794ef89153d213f767d7e76e8D�f � 51a15a1f28637adcdf2f0d13e8d6a81017809612ab5a6a46dda8025be6f4aeec � � � ���pk� fAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���ok�% fAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��niq fAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��mi�y fAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � z� I � z��uk� fAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��tk�7 fAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��sk_ fAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��rk�w fAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���qk� fAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � ���yk�% gAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��xiq gAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��wi�y gAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage�{��vk� fAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 D y��� � D z��k� gAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��~k�7 gAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��}k_ gAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��|k�w gAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���{k� gAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���zk� gAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock � �~ � ���k� hAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���k� hAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���k�% hAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��iq hAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�{�� k� gAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 Q ��Q Q �{�� k� hAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��k� hAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��k�7 hAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��k_ hAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��k�w hAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services I F�K�> I �p��k�w iAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���k� iAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock��� k� iAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��� k�% iAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk�� iq iAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�5�� k� hAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict � ��FF � �5��k� iAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��k� iAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��k� iAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��k�7 iAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��k_ iAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254 6 t�gr 6 �P��k�7 jAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��k_ jAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��k�w jAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���k� jAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���k� jAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���k�% jAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issues @ ���S � @ ��� k� kAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock��� k�% kAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesq�� k{ jAndreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5�� k� jAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{�� k� jAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��k� jAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role � z� I � z��%k� kAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��$k�7 kAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��#k_ kAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��"k�w kAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���!k� kAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock V F�K V �p��*k�w lAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���)k� lAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lockq��(k{ kAndreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��'k� kAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��&k� kAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 ��FF � q��0k{ lAndreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��/k� lAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��.k� lAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��-k� lAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��,k�7 lAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��+k_ lAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254 d ���9 d �P��6k�7 mAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��5k_ mAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��4k�w mAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���3k� mAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lockz��2k� lAndreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c��1k_ lAndreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023 bR RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ���{ ���| ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� ���# ���% ���* ���- ���/ ���5 ���9 ���? ���C �H Á�O ā�T Ł�Y Ɓ�] ǁ�c ȁ�g Ɂ�l ˁ�p ́�u ́�y � ρ� Ё� с� ҁ� Ӂ� ԁ� Ձ�% ց�* ׁ�0 �6 ځ�< ہ�C ܁�J ݁�R ށ�X ߁�] ��b ��f ��k ��r ��v ��{ �� �� �� �� �� �� �� �� ��$ ��) ��- ��3 ��8 ��= ���C ���H ���N ���T ���Y ���^ ���d ���j ���p ���w ��~ �� �� �� �� �� ��" ��* ��1 ��7 ��? ��G ��K ��N ��O ��P ��Q ��R ��U n ���S � n z��<k� mAndreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c��;k_ mAndreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q��:k{ mAndreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��9k� mAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��8k� mAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��7k� mAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role * �,�N � * �3��Ck�} nIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��Bik nAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m��Aiu nAndreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi��@im nAndreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU��?iE nAndreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057|��>k� nIsaac Boukris <iboukris@redhat.com> - 4.10.15-2^��- resolves: #1825505 - Compilation of samba sources fails on RHEL�v��=i� nAndreas Schneider <asn@redhat.com> - 4.10.15-1^���- related: #1785121 - Rebase to version 4.10.15 - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of - resolves: #1801496 - Add missing ctdb directories _ ���% � _ i��Jim oAndreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU��IiE oAndreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057|��Hk� oIsaac Boukris <iboukris@redhat.com> - 4.10.15-2^��- resolves: #1825505 - Compilation of samba sources fails on RHEL�v��Gi� oAndreas Schneider <asn@redhat.com> - 4.10.15-1^���- related: #1785121 - Rebase to version 4.10.15 - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of - resolves: #1801496 - Add missing ctdb directoriesw��Fk� nIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��Ek� nIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��Dii nAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires E �#k � � E i��Rim pAndreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU��QiE pAndreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057w��Pk� oIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��Ok� oIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��Nii oAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3��Mk�} oIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��Lik oAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m��Kiu oAndreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal users �#k � w��Xk� pIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��Wk� pIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��Vii pAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3��Uk�} pIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��Tik pAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m��Siu pAndreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal users e �C � e m��]iu qAndreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi��\im qAndreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU��[iE qAndreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057k��Ziq pAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p��Yi�y pAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage | ��q�| w��bk� qIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��ak� qIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��`ii qAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3��_k�} qIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��^ik qAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16 x �0 x �3��fk�} rIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��eik rAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16k��diq qAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p��ci�y qAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage < �� � < k��kiq rAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p��ji�y rAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew��ik� rIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��hk� rIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��gii rAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires ^ t�g�C � ^ v��rk� sIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��qii sAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3��pk�} sIsaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��oik sAndreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16���nk� rAndreas Schneider <asn@redhat.com> - 4.10.17-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���mk� rAndreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���lk�% rAndreas Schneider <asn@redhat.com> - 4.10.17-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issues e �r+��V��: � � e D� � 5b8e30bc61877d67eb0781546eda037e3125af2d61226ff947eae46d951dea87D�~ � 83d237d121542e1a8974ca5404efc06ebabca5aa5ab1f7f036ed16f3396c2445D�} � 2ed0b9cb14b8c09ea2a369592a8ae716f4f5a0d7a288dbb4a4fa9e6089e40760D�| � 76499affa56e11ce8cb0b60296dc990f3d6d2f235f5edeb8261ed147ff7a3323D�{ � 1d90c0cbed34ba8bd0787832d1c7deb1024fe2c25a4f9accea2b95c7fa1c152aD�z � 3ba1c872bc9e60330b7b4b28cf7a36bdd1618d3c55d034ccc2f1b537590a34b8D�y � f7faa6dc9e93209b28d0cf6a0ef6f0697ece6387cbb402f2554016b1db3192a5D�x � ad24252031ea8c0e12e7acf23ebf80586b5162f12ce5e4eac8273966928e89d0D�w � 36410412b59ca22b5708b34c6f8dafdb38024efff345c20c4dc28c75a7eb8a0aD�v � b3350c79767fa9a0a0ac49e9e26cb2d6f221c594bddb72ca5a870a8d7661e0f1D�u � 8c78bd9be20532927c0a937e33b0befaa0f49afcab1f09654f5004054cf179b0D�t � b57c33a0b61dc0b3c7c8b1c2fc69d8106f19978caed12eb3547f80ac41328a7aD�s � 51eac9ff71e53c4175eb210efa8bffca4476cc9cd86104293d1ca7f714062a4e � ��! � ���vk�% sAndreas Schneider <asn@redhat.com> - 4.10.17-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��uiq sAndreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p��ti�y sAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpagew��sk� sIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tag � y��� w��{k� tIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��zk� tIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��yii tAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires���xk� sAndreas Schneider <asn@redhat.com> - 4.10.17-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���wk� sAndreas Schneider <asn@redhat.com> - 4.10.17-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock � � � ���k� tAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���~k�% tAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��}iq tAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��|i�y tAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � z� �9 � w��k� uIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��k� uIsaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��ii uAndreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requiresc��k_ tAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��k�w tAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��� k� tAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ��� k� uAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���k�% uAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��iq uAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��i�y uAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � z� � w�� k� vIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagc�� k_ uAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�� k�w uAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��� k� uAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ���k� vAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���k�% vAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��iq vAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��i�y vAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage P z� I � P w��k� wIsaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagz��k� vAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��k�7 vAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��k_ vAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��k�w vAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���k� vAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ���k� wAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���k�% wAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��iq wAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��i�y wAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � z� I � z�� k� wAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P�� k�7 wAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc�� k_ wAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p�� k�w wAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services��� k� wAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � � � ���$k� xAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���#k�% xAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��"iq xAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��!i�y xAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage � z� I � z��)k� xAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��(k�7 xAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��'k_ xAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��&k�w xAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���%k� xAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock � ���-k�% yAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��,iq yAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�p��+i�y yAndreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage�{��*k� xAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 D y��� � D z��3k� yAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��2k�7 yAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��1k_ yAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��0k�w yAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���/k� yAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���.k� yAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock � �~ � ���8k� zAndreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���7k� zAndreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���6k�% zAndreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��5iq zAndreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�{��4k� yAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 Q ��Q Q �{��=k� zAndreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��<k� zAndreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��;k�7 zAndreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��:k_ zAndreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��9k�w zAndreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services I F�K�> I �p��Ck�w {Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���Bk� {Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���Ak� {Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���@k�% {Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesk��?iq {Andreas Schneider <asn@redhat.com> - 4.10.16-9_�:�- related: #1853272 - Add back missing patch hunks�5��>k� zAndreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict � ��FF � �5��Hk� {Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��Gk� {Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��Fk� {Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��Ek�7 {Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��Dk_ {Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254 6 t�gr 6 �P��Nk�7 |Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��Mk_ |Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��Lk�w |Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���Kk� |Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock���Jk� |Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���Ik�% |Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issues @ ���S � @ ���Tk� }Andreas Schneider <asn@redhat.com> - 4.10.16-11`@- resolves: #1876839 - Fix double crash when requesting share mode lock���Sk�% }Andreas Schneider <asn@redhat.com> - 4.10.16-10_��- resolves: #1868327 - Fix winbind in trust scenaries with connection issuesq��Rk{ |Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��Qk� |Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��Pk� |Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��Ok� |Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role � z� I � z��Yk� }Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��Xk�7 }Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��Wk_ }Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��Vk�w }Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���Uk� }Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lock V F�K V �p��^k�w ~Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���]k� ~Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lockq��\k{ }Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��[k� }Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��Zk� }Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142 ��FF � q��dk{ ~Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��ck� ~Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��bk� ~Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��ak� ~Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role�P��`k�7 ~Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��_k_ ~Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254 d ���9 d �P��jk�7 Andreas Schneider <asn@redhat.com> - 4.10.16-16a�@- resolves: #2019661 - Fix CVE-2016-2124 - resolves: #2019673 - Fix CVE-2020-25717 - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idlc��ik_ Andreas Schneider <asn@redhat.com> - 4.10.16-15`��@- resolves: #1949444 - Fix CVE-2021-20254�p��hk�w Andreas Schneider <asn@redhat.com> - 4.10.16-14`t6@- resolves: #1937867 - Fix possible core dump with printing support - resolves: #1930747 - Ensure that libwbclient has been updated before restarting services���gk� Andreas Schneider <asn@redhat.com> - 4.10.16-13`�@- related: #1876839 - Fix double crash when requesting share mode lockz��fk� ~Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c��ek_ ~Andreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023 n ���S � n z��pk� Andreas Schneider <asn@redhat.com> - 4.10.16-24cʂ@- related: #2154364 - Add additional patches for CVE-2022-38023c��ok_ Andreas Schneider <asn@redhat.com> - 4.10.16-23c��@- resolves: #2154364 - Fix CVE-2022-38023q��nk{ Andreas Schneider <asn@redhat.com> - 4.10.16-20c ��- resolves: #2119058 - Fix possible segfault in winbind�5��mk� Andreas Schneider <asn@redhat.com> - 4.10.16-19bzS�- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong mapping for uid/gid conflict�{��lk� Andreas Schneider <asn@redhat.com> - 4.10.16-18a��@- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717 - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717 - resolves: #2046148 - Fix CVE-2021-44142z��kk� Andreas Schneider <asn@redhat.com> - 4.10.16-17a�K�- related: #2019673 - Add missing checks for IPA DC server role e �r+��V��: � � e D� � e0a695f230a608e0bfdeba85a6146080546349b0d23836b272a5c44012b9fa09D� � 5acff1ca859e33437e5bba88b3f8e1335360828b81bf51c413327aa84347242dD� � 2ecaf9207562dd4f4767c7e478f1e8c603b1b90864ef3d2b0d210d4f60a1d9edD� � f5d9885773ed21397aa08232737d51af6803c1358395a2168b6820ce496d927fD� � 4d2980f737ca5c15f4f33e1a43a82d6b00ca06a5c6d284643ea2f0b2e7928f76D� � c18739f0ff30069eb1e908fc713e8ef1e7fa3a75c981a8b45cd1383597e8a1e9D� � 7e6cf4cf5a25112c185e8d9c2750ce650787af37ded646d8d3923984a1868673D� � 1b3f8f389416ac835d75a09fd6027e44daad1e8447c349cac349b674506ce80fD� � d161a8ffe0e1f9856548b6a48619295b25351949a76f0c3447034360be168304D� � 126e1f4ba7b91116dc2de61216743f423ed250ef44140f20c97de01055c2374aD� � 1aa4d5a6ea319219e3813cc9caf102cd6341fa2aebfa9e4b9096e4e1df7854d2D� � a4f8b4717015fbf8177d95a8a84a98b233c1bb9171ffa261d3b9bfff69345e5dD� � bc009c7bfbbc8f4c90f5bb2715b2f88462acdb617db354d01214ce91bf2aab13 * �,�N � * �3��wk�} �Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��vik �Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m��uiu �Andreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi��tim �Andreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU��siE �Andreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057|��rk� �Isaac Boukris <iboukris@redhat.com> - 4.10.15-2^��- resolves: #1825505 - Compilation of samba sources fails on RHEL�v��qi� �Andreas Schneider <asn@redhat.com> - 4.10.15-1^���- related: #1785121 - Rebase to version 4.10.15 - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of - resolves: #1801496 - Add missing ctdb directories _ ���% � _ i��~im �Andreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU��}iE �Andreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057|��|k� �Isaac Boukris <iboukris@redhat.com> - 4.10.15-2^��- resolves: #1825505 - Compilation of samba sources fails on RHEL�v��{i� �Andreas Schneider <asn@redhat.com> - 4.10.15-1^���- related: #1785121 - Rebase to version 4.10.15 - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of - resolves: #1801496 - Add missing ctdb directoriesw��zk� �Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��yk� �Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��xii �Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires E �#k � � E i��im �Andreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU��iE �Andreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057w��k� �Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��k� �Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��ii �Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3��k�} �Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh�� ik �Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m��iu �Andreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal users �#k � w�� k� �Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv�� k� �Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg�� ii �Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3�� k�} �Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��ik �Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16m��iu �Andreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal users e �C � e m��iu �Andreas Schneider <asn@redhat.com> - 4.10.15-5^��@- resolves: #1831986 - Fix gencache for normal usersi��im �Andreas Schneider <asn@redhat.com> - 4.10.15-4^��@- resolves: #1813017 - Fix smbclient log to fileU��iE �Andreas Schneider <asn@redhat.com> - 4.10.15-3^�U@- Removed patch for #1634057k��iq �Andreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p�� i�y �Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage | ��q�| w��k� �Isaac Boukris <iboukris@redhat.com> - 4.10.16-7_�- related: #1852812 - trigger a rebuild to get the right tagv��k� �Isaac Boukris <iboukris@redhat.com> - 4.10.16-6_A@- resolves: #1852812 - Fix additioanl hostnames with win DCg��ii �Andreas Schneider <asn@redhat.com> - 4.10-16-5^א�- related: #1785121 - Add missing RPM Requires�3��k�} �Isaac Boukris <iboukris@redhat.com> - 4.10.16-2^�?@- resolves: #1828354 - add additioanl hostnames to the keytab - resolves: #1836427 - add dnshostname option net-ads-joinh��ik �Andreas Schneider <asn@redhat.com> - 4.10.16-1^˳@- related: #1785121 - Rebase to version 4.10.16 d � d ����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild����� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuildk��iq �Andreas Schneider <asn@redhat.com> - 4.10.17-9_�:�- related: #1853272 - Add back missing patch hunks�p��i�y �Andreas Schneider <asn@redhat.com> - 4.10.16-8_��- resolves: #1878205 - Fix restarting winbind on package upgrade - resolves: #1892632 - Fix CVE-2020-14318 - resolves: #1891687 - Fix CVE-2020-14323 - resolves: #1879834 - Fix CVE-2020-1472 - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u) - resolves: #1868917 - Fix %U substitution for 'valid users' option - resolves: #1853272 - Fix 'require_membership_of' documentation in pam_winbind{.conf} manpage * �.��g � * �'��"s�] �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF�- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)� ��!o�+ �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h�- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)��� o�G �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11]�)�- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)��� m� �Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S��- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M�� _? �Daniel Mach <dmach@redhat.com> - 1.0.25-9R�U�- Mass rebuild 2014-01-24M�� _? �Daniel Mach <dmach@redhat.com> - 1.0.25-8R�k�- Mass rebuild 2013-12-27l�� mo �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q��@- fix support for aarch64, another part (#969831)^��mS �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR�@- fix support for aarch64 (#925887) / d�f��T � / ���*o�G �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11]�)�- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)���)m� �Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S��- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M��(_? �Daniel Mach <dmach@redhat.com> - 1.0.25-9R�U�- Mass rebuild 2014-01-24M��'_? �Daniel Mach <dmach@redhat.com> - 1.0.25-8R�k�- Mass rebuild 2013-12-27l��&mo �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q��@- fix support for aarch64, another part (#969831)^��%mS �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR�@- fix support for aarch64 (#925887)���$�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���#�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild h o�'�) � h M��1_? �Daniel Mach <dmach@redhat.com> - 1.0.25-8R�k�- Mass rebuild 2013-12-27l��0mo �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q��@- fix support for aarch64, another part (#969831)^��/mS �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR�@- fix support for aarch64 (#925887)���.�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���-�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild�'��,s�] �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF�- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)� ��+o�+ �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h�- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086) � �)��M � ���7�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild�'��6s�] �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF�- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)� ��5o�+ �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h�- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)���4o�G �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11]�)�- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)���3m� �Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S��- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M��2_? �Daniel Mach <dmach@redhat.com> - 1.0.25-9R�U�- Mass rebuild 2014-01-24 : d�A�j � : � ��?o�+ �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h�- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)���>o�G �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11]�)�- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)���=m� �Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S��- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M��<_? �Daniel Mach <dmach@redhat.com> - 1.0.25-9R�U�- Mass rebuild 2014-01-24M��;_? �Daniel Mach <dmach@redhat.com> - 1.0.25-8R�k�- Mass rebuild 2013-12-27l��:mo �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q��@- fix support for aarch64, another part (#969831)^��9mS �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR�@- fix support for aarch64 (#925887)���8�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild " T� �J � � " ���Gm� �Peter Robinson <pbrobinson@redhat.com> 1.0.25-10S��- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)M��F_? �Daniel Mach <dmach@redhat.com> - 1.0.25-9R�U�- Mass rebuild 2014-01-24M��E_? �Daniel Mach <dmach@redhat.com> - 1.0.25-8R�k�- Mass rebuild 2013-12-27l��Dmo �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-7Q��@- fix support for aarch64, another part (#969831)^��CmS �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-6QR�@- fix support for aarch64 (#925887)���B�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-5Q �- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild���A�� �Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.25-4P��- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild�'��@s�] �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF�- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024) � a�$ � �T��Ko�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�'��Js�] �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1aF�- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)� ��Io�+ �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12^h�- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)���Ho�G �Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-11]�)�- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577) w qx w �|��No� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Mo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Lo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Oo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Po�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Qo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Ro�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��Uo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��Tq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���So� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��Xo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Wo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Vo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��Yo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Zo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��[o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���^q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��]q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���\o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��ao�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��`o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��_o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��bo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��co� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��do�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���gq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��fq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��jo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��io� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��hq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��ko�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��lo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��mo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���pq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��oq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���no� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��so�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��rq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��qq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update e �r+��V��: � � e D� � 94640be31162fbff22a0573cb0d7212f9516ed92f67a3553e720fa125d332b1fD� � 7d44f440dcfa707ff7ed627fb7b3fb3254742dcf60373b386105ea09f4e14293D� � 8d73e99ddd2060604e1a2bddc4b10b1b92cf6f81b0d2a05a103cebd6d052a316D� � 4846ff9c3501bdbb24a3b5c855a6e385c608a7387446302cb070e7c305b0a087D� � f868ce40374cc82b06433374fe4cf3bba215a30f1d27cc97037f1c1d746e0c33D� � e668a6070cd6a22b4de750baa84e146e8e064e1a05849a958600f9b2d6b51c0dD� � 905b3f686bda411e8b1469cccabec8ed3ae99a60153880597dd656cabc81a501D� � f595ada1902e66bf4b5ae1c8ad3bf1f1092dee59bd392f2519b518dd24fc8e33D� � eb952f256def8d9b5c0ecaab67593927376bd7ec33819298399c3542e974f47bD� � 3ab460e6bd274b4d17b8de62c56e1c66dc26fda6159f4e9f57be04e8bb94bc1aD� � 2719ebeaea38face0d4ce2a92221526737bef4b1a797d1c4a93a640ef5251600D� � ca1ec435ed2ce96fee64276f36654333806f220fe770817ae10d14688f42be20D� � 576b6cc00210001f9cced4b7f0a9cce611a7ec4e4294bb24f514f685685d994d " " �Y��to�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��vo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���yq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��xq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���wo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��|q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��{q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��zq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��}o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��~o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t�� a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)�� a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P�� g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_�� c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)��� g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x�� i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T�� o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c�� k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��!o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� �� o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��"o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��#o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��%i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��$o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��'o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��&k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��*o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��)o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��(o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��+o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target bR yRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ��Y ��Z ��[ ��^ ��a ��b ��c ��d ��g ��j ��k ��l ��m !��p "��s $��t %��u &��v '��y (��| )��} *��~ +�� ,�� -�� .�� /�� 0�� 1�� 2�� 3�� 4�� 5�� 6�� 7�� 8�� 9��! :��" ;��# <��% =��' >��* ?��+ A��, B��- C��. D��1 E��3 F��4 G��5 H��6 I��9 J��< K��= L��> M��? N��@ O��C P��F Q��G R��H S��I T��L U��O V��P W��Q X��R Y��S Z��V [��Y \��Z ]��[ ^��\ _��_ `��b a��c b��d c��e d��f e��i f��l g��m h��n i��o j��r k��u m��v n��w o��x p��y q��| r�� s�� t�� u�� v�� w�� x�� " " �Y��,o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��-o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��.o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��1o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��0o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��/o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��3o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��2o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��4o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��5o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��6o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��9o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��8q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���7o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��<o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��;o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��:o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��=o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��>o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��?o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��@o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��Co�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��Bq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Ao� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��Fo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Do�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��Go�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Io�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Lq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Kq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Jo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��Oo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��No�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Mo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Po�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Qo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��So�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Vq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Uq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���To� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��Yo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Wo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��Zo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��[o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��\o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���_q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��^q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���]o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��ao�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��`q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��co�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��do�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��fo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���iq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��hq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���go� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��lo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��ko� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��jq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��mo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��no� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��oo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���rq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��qq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���po� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��tq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��sq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update e �r+��V��: � � e D�& � 7813e68c7a683514d7f3a5da05d9e10253ff77a5a4efb99321ccd3176db9dd97D�% � fb633afcbec86339bf68947e27f45d0baba732bf9a5f35de6dd47472c02091a8D�$ � 6323899c2cf49904753b9b4050225498b3bce1cc5ae2893977e1201c90220e64D�# � 2f0b2cb6eb70e8325b1e26082c9f953fa3bbe383a04e9bad22161bf475931cd5D�" � 3119a1efea41b19b200e56173924d777ef2edb1f4cb0722d9c9d99b5001de9b2D�! � 6cd37a431fbb8cf1ad0ee95e2fbef2ca533dd95e28fed9e9845a74acd29cccbeD� � 5005ebdd55f4e6e5ffc6888045041951f173c1227a635bb776b918e888efdfbaD� � 878c505e878a659e3fe83b051ba1014e223ab1130afed6d39765703c451945b3D� � 95c0d1a3ba0c09becb41fdca9e7a82ee4f169e2c6bd810f7883f9414d007e4c3D� � e41dee63d125e890be93881d99ae457aaebbcaa795e8a90597fa3babf9dd5a67D� � ca7df206b32aa8f478b9a3751e1c7049c9f5302ca5417f2e0531f4bacadcf5dcD� � f6b96a84dad57397afdccb0873c1927936c50a3c80b0b8e632763ea46c6bd495D� � 33cb91f162bf1272cbef0f8ac3f812a3af2b586d5be6e77a0a773db69590044b � � �2��vo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��wo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��yo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���|q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��{q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���zo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��~q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��}q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-�� o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=�� q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-�� o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���"q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��!q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��%q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��$q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��#q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��(a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��'a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��&q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��*a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��)a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��,g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��+c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��/g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��.g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���-g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��2a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��1a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��0g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t��4a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��3a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��6g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��5c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��9g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��8g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���7g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��<i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��;i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��:g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��?o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��>k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��=i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��Bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Ao�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��@o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Co�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Do�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��Gi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��Fi�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��Ei� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��Io�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Hk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Lo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Ko�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Jo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Mo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��No�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��Pi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��Oi�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��Ro�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Qk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��To�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��So�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Vo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Wo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��Yi�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��Xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��\o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��[k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��Zi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��_o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��^o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��]o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��`o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��ao�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] bR �RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ z�� {�� |�� }�� ~�� �� ��� ��� ��� ��� ��� ��� ��� ���" ���% ���( ���* ���, ���/ ���2 ���4 ���6 ���9 ���< ���? ���B ���C ���D ���G ���I ���L ���M ���N ���P ���R ���U ���V ���W ���Y ���\ ���_ ���` ���a ���c ���e ���h ���i ���j ���k ���m ���o ���r ���s ���t ���u ���v ���y ���{ ���| ���} ���~ ��� ��� ��� ��� ��� ��� ��� ��� ��� � Á� ā� Ł� Ɓ� ǁ� ȁ� Ɂ� ʁ� ˁ�! ́�" ́�# �$ ρ�' Ё�* с�+ ҁ�, Ӂ�- ԁ�. Ձ�1 ց�4 ׁ�5 �6 ف�7 ځ�: ہ�= ܁�> ݁�? � :� x��ci� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��eo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��dk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��go�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��fo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��io�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��jo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��ko� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��mi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��lo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��oo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��nk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��qo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��po�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��so�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��to�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��vo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] e �r+��V��: � � e D�3 � f21d363926810e31889a7fa98205382c0b8de58aa4f45928c27d9e67046b9482D�2 � ef8ede3695ebb9829a9403065f243ab8acef8f14316aabcc9b26c4255ee93bbeD�1 � f6b017a1e5d505f7794845950a247b12ba961e8bd6ea366098a0ca5e83e7acecD�0 � cb1bac17d8c7b1c7813cfbc4a050c0bd153b06a08874a369c55a1597e25d5a52D�/ � b181a29e8b480e5cdb16c69bd46f0085d124c0cf817f9faa339ebe447295beabD�. � 6123edb3ca2fb4af89e0aafdcc06a518dc2adf261f69c5208d7e0dcf72996887D�- � 2031956532e4c86af01a9e7885660b200d3432a40e8aa1938e571e99424f7b1dD�, � 13c6b2ac5e5019a9debc589efedb039c95513584922436476bdc65f0fa84b5e8D�+ � b9cdab2c69719f6bbf7b533475859fb6f47e37976e9c3f8dc8235fb67f98c995D�* � 820ba4ad8ead8e86f08c52f1683fb89e78daca198b5a3d010ccbda6eeb6afeedD�) � b29691f0851773e177dbf1022fdd7407ebdb0329a1fb62e66ecd797a49de36deD�( � b16a84b46233f40caa0d30fca524f23408cdf7301cecddbe17cc7b23be9336c9D�' � d2d65f2dde15fdba0abf08f0eba0a75c42ca7a41d64da706060132398e03a472 � �t��yo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��xo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��wo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��{o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��zo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��|o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��}o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��~o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� �� q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � �� o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� �� q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��!o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��"o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��#o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��$o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���'q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��&q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���%o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��*o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��)o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��(q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��+o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��,o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��-o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��.o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���1q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��0q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���/o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��4o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��3o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��2q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��5o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��6o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��7o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���:q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��9q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���8o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��=o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��<q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��;q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��>o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��?o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��@o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Ao�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Dq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Cq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��Go�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Fq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Eq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��Ho�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Io� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Jo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Mq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Lq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Ko� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Pq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Oq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Nq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��Qo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Ro�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��So� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��To�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Wq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Vq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Zq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Yq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Xq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��[o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��\o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��]o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���`q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��_q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���^o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��cq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��bq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��aq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��dq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��eo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��fo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��go�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���jq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��iq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��mq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��lq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��kq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��pa� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��oa�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��nq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��ra� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��qa�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��tg�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��sc�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��wg� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��vg�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���ug�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��za� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��ya�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��xg�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target e �r+��V��: � � e D�@ � a28c0efdadc06bf5a7278211745c542df980210b991db1532357b48d09b0e233D�? � 4eb469f0ca30f89921cee1b76ff6dd7b1c0025256c9be1d13e2d2c4dfbb1b927D�> � dcac6f9cfc56c02c04c7a838dc97614858baaa53286986731947f8d1e57c98acD�= � 932effd782396fd543e9119dfb730e5009b85100c4e34c453d8c4079975172a7D�< � a06df499751c88597c0ff2c9e3571f888ef5f4c900179b21dd22799ec89b624aD�; � 3c2c5a9be0e4c30b02e5553db78d0a3f434bf544273422faeab125baf392165eD�: � 5bba5c2f7eb1e8689b410449cc9ad15917af4897477ab8f44972e6e8c0298324D�9 � 0ed0c68541bccf9732065a361a46692699a4a2ce01c4a502809c2c7c16a1d213D�8 � 88ac00911754d4623eae65cfa475ed5082d7d2b0f2ed678b1b27991079abf58cD�7 � 8e8d757181381eff83e8b40078f2dd69e053551b72a94cd397d0ddcad18a61eeD�6 � 2d829e46da9b44d01cec2e07cdfb10a09d198cb3c3c5b5bb26d4f5db8f2a7853D�5 � 232b24511b4ca567b436255eb6fe7f9fe68d66f2514a25334fc5cc4097d48238D�4 � d7bfd9d26185d5c9bbb6d7f10f8dfc69f1ef41dccd5f719b912299bbc532252f � R� t��|a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��{a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��~g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��}c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p�� g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}�� i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] bR !CRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ ߁�A ��D ��G ��H ��I ��J ��M ��P ��Q ��R ��S ��T ��W ��Z ��[ ��\ ��] ��` ��c ��d ��e ��f ���g ���j ���m ���p ���r ���t ���w ���z ���| ���~ ! �� !�� !�� !�� !�� !�� !�� !�� !�� ! �� ! �� ! �� ! �� !�� !�� !�� !��! !��$ !��' !��( !��) !��+ !��- !��0 !��1 !��2 !��3 ! ��5 ! ��7 ! ��: ! ��; ! ��< !!��= !"��> !#��A !$��C !%��D !&��E !'��F !(��I !)��L !*��M !+��N !,��O !-��P !.��S !/��V !0��W !1��X !2��Y !3��\ !4��_ !5��` !6��a !7��b !8��c !9��f !:��i !;��j !<��k !=��l !>��o !?��r !@��s !A��t !B��u � N� x��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��!i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��$o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��#k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��"i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��'o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��&o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��%o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��(o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��)o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��+i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��*o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��-o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��,k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��0o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��/o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��.o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��1o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��2o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��3o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��5i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��4o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��7o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��6k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��:o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��9o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��8o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��;o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��<o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��=o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��>o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��Ao�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��@o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��?o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��Co�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��Do�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Fo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��Io�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��Hq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Go� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��Lo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Ko�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Jo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Mo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��No�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Oo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Po�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��So�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��Rq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Qo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��Vo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��To�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��Wo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Yo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���\q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��[q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Zo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��_o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��^o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��]o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��`o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��ao�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��co�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���fq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��eq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���do� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��io�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��go�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��jo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��ko� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��lo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���oq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��nq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���mo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��qo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��pq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��so�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��to�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��vo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���yq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��xq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���wo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��|o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��{o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��zq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update e �r+��V��: � � e D�M � 168bff58938382034bb054ff55ce6aa5b0976326389d6260fbc85840fe154bd8D�L � ca86ae6d34c40dee72606cee1e52e0dc9ab807fce4ecf71c5fbd47ec447bfbc9D�K � 820151304111db2bd87d6e5ae6446b11a958a081a44feb85b88cf0ec6c550aedD�J � 7744a295fd69e27c223298b284d7c8853f441d6b08e8333049ec0bbc9e32287cD�I � 2f36d8b2e3ff73bf61ed280b55eab167ae99178b23f186fbf6d4721158eb5a5aD�H � ce07814a85fabc6115195714ab5d8670ba930a5369258eadf917f899881058b0D�G � af9cf3acff909c4085ae929a3f5506bf2bed9dda37507802c11ad79e8d903390D�F � 9c0edeaeecaf19ea413db53d573ef306f6f69adbc4a87d9e0c522e0a6385b8d6D�E � ccd6b1145000587fc43fbba493221eba1716a9183d64796c8e42beecbbad5afcD�D � 12944ec5810169ac73652bcbd5cc441c1d5a084cd3877df22452e21f63a8b978D�C � 94e1c0f560a6748a67411c8d4a86f1e3f8f7528cf1614061076e85844e120007D�B � 445c2d91fe49788941d409448267b19e014c9f6354238fdee408aa1d585cfd01D�A � 496ee19b0bed3aa542d3fe7473b517f0eca004f3306333e343b200c30cdad5c7 " " �Y��}o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��~o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-�� o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h�� q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-�� o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��"q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��!q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h�� q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��#o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��$o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��%o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���(q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��'q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���&o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��+q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��*q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��)q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��,q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��-o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��.o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��/o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���2q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��1q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���0o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��5q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��4q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��3q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��8a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��7a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��6q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��:a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��9a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��<g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��;c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��?g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��>g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���=g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��Ba� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��Aa�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��@g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t��Da� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��Ca�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��Fg�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��Ec�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��Ig� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��Hg�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���Gg�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target bR !�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ !D��y !E��| !G��} !H��~ !I�� !J�� !K�� !L�� !M�� !N�� !O�� !P�� !Q�� !R�� !S�� !T�� !U�� !V�� !W�� !X�� !Y�� !Z�� ![�� !\��" !]��# !^��$ !_��% !`��( !a��+ !b��, !c��- !d��. !e��/ !f��2 !g��5 !h��8 !i��: !j��< !k��? !l��B !m��D !n��F !o��I !q��L !r��O !s��R !t��S !u��T !v��W !w��Y !x��\ !y��] !z��^ !{��` !|��b !}��e !~��f !��g !���i !���l !���o !���p !���q !���s !���u !���x !���y !���z !���{ !���} !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !��� !���! !���$ !���' !���( !���) !���* !���+ �� �-��Li�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��Ki� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��Jg�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��Oo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Nk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��Mi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��Ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Qo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Po�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��So�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��To�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��Wi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��Vi�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��Ui� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��Yo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Xk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��\o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��[o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Zo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��]o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��^o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��`i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��_i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��bo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��ak�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��do�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��co�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��fo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��go�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��ii�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��lo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��kk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��ji� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��oo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��no�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��mo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��po�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��qo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��si� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��uo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��tk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��wo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��vo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��yo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��zo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��{o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��}i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��|o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] e �r+��V��: � � e D�Z � b31b9cf432a59766c6b5f9c8b9dfb6791a76a37c136babc439b16abef4d2ae11D�Y � bc42b202db19ddd70b5c8192eb30b148f6a3229d05aa0eaa7757cdfab321184eD�X � a68751d71e847954a2206eba95e8947850efa80cb938416951ff10e842a23580D�W � 7c83aac8738db8a2cfb8c54ae4ea010d008959520d9078ac174ef677f712c83dD�V � afa6cc1c77134d47d632ccdb524207f5d3993077790a943141d1dbd8cf0b211cD�U � cbca2af9e05f80103f7d418c99cb1e8808a0b5b2aeb348a19e6ec009ccfe7972D�T � bd426d0e03bbd097435638bf127e0f1c2cd5e3fbaa1161378173491fadba6adbD�S � 08eccef6a2ce6a06f95c7ad30f3fdd7db91e89b3991bbe05cc786dee1ccc9074D�R � 823e82a094d45f0cabd438920e6e33584712ea5e4c9e767ad9d3d1a34b4ee0e2D�Q � ace47954cb2fb4fba9ee4f0144a123a7fcd2343db0c8f16037bd3439f3b38736D�P � f7bd069d04d994e785e1883f97be7c9af76091600cb13d99b634f878bb79c5e0D�O � 21c9f734ac2660b9ca8602966521796728c6e3830a5aa75fda5d6c6674d2f5d3D�N � 3990236c7fd1972169692ed6297dee2d25331fe73bf38ac66bd45bb990ed139a � � �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��~k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� �� o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t�� o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��!o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���$q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��#q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���"o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��'o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��&o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��%o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��(o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��)o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��*o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��+o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���.q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��-q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���,o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��1o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��0o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��/o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��2o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��3o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��4o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���7q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��6q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���5o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��:o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��9o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��8q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��;o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��<o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��=o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��>o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Aq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��@q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���?o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��Do�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Co� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��Bq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��Eo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Fo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Go�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Jq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Iq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��Mo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��Lq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Kq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��No�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Oo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Po� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Qo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Tq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Sq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��Wo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Vq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Uq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��Xo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Yo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Zo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���]q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��\q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���[o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��`q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��_q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��^q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��ao�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��bo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��co� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��do�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���gq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��fq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��jq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��iq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��hq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��ko�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��lo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��mo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���pq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��oq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���no� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��sq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��rq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��qq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��tq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��uo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��vo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��wo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] bR "RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ !���1 !���2 !���3 !���4 !���7 !���: !���; !���< !���= !���> !���A !���D !���E !���F !���G !���J !���M !���N !���O !���P !���Q !���T !���W !���X !�Y !Á�Z !ā�] !Ł�` !Ɓ�a !ǁ�b !ȁ�c !Ɂ�d !ʁ�g !ˁ�j !́�k !́�l !�m !ρ�p !Ё�s !с�t !ҁ�u !Ӂ�v !ԁ�w !ց�z !ׁ�} !� !ځ� !ہ� !܁� !݁� !ށ� !߁� !�� !�� !�� !�� !�� !�� !�� !��! !��$ !��% !��& !��( !��* !��- !��. !��/ !��1 !��4 !��7 !��8 !��9 !���; !���= !���@ !���A !���B !���C !���E !���G !���J !���K !���L " ��M "��N "��Q "��S "��T "��U "��V "��Y "��\ " ��] " ��^ " ��_ " ��` " ��c ? |� ? ���zq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��yq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��}q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��|q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��{q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y�� a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��~q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] e �r+��V��: � � e D�g � 26e499c5c940c85a9dc99a8198b266b67825eeb218071c6b6d0848d7e3ba9b92D�f � f8321c847bc9b5ba2834eb175db280c4c1ab904ea8bbe5ce080e0e4a7f8e9536D�e � e96f88c3dd68cba08085ab79ac4207e040e7c65ade70b55699f2e7ff5fa8e7bfD�d � d41f2ba7244ea561f95aae87e10fc0d097ee72ed2f5cf1cb1e7455374f1add83D�c � da23c291f94eaf3fa1751e0812449824e582ca5853fa7e71e730f6f1fb2e0327D�b � 84ff86ac505c0857bbf75916d7ef4b6be65454e5dd5ec6ed67ec662a819c10e0D�a � e75e5f7dc4aac557d9b274de60d58b81f3549dd86073ed6505512e434de72884D�` � b1e85cc0f0d7b4783c129d2855d494d189e1974a9dfc0cafeac3f27cae0d79deD�_ � 7003e053072c0715532264432024d1fce948f74d5ed2f2cef63aee418dfd47a5D�^ � 5544075a70cc259a73eb5555c11efef72bbad8385da2d376a511efce351ff5dfD�] � cc04b6fd7a53d6566cf64cd227d959dc95f522bc3b6e773b8a1346ff987aedd2D�\ � d4f34dceeada317c1daa9f144ef934ddb2e8268f3b1e5ea56ff174ca96919479D�[ � 681f16ea3fafb50e4f8583381026ef08759cc8c327b923cb4b822515b1d02144 � R� t��a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y�� a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.�� a�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t�� a� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)�� a�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��g�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_�� c�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��g� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��g�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���g�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��g�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x�� i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-�� i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}�� i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��!o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c�� k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��$o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��#o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��"o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��%o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��&o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��(i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��'i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��*o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��)k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��-o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��,o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��+o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��.o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��/o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��1i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��0o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��4o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��3k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��2i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��7o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��6o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��5o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��8o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��9o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��;i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��:o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��=o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��<k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��@o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��?o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��>o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Ao�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Bo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Co� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��Ei� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��Do�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��Go�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Fk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Jo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Io�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Ho�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Ko�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Lo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Mo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��No�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��Qo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Po�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��Oo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��So�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��To�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Vo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��Yo�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��Xq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Wo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��\o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��[o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Zo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��]o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��^o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��_o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��`o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��co�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��bq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���ao� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��fo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��do�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��go�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��ho� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��io�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���lq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��kq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���jo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��oo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��no�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��mo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��po�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��qo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��ro� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��so�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���vq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��uq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���to� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��yo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��wo�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��zo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��{o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��|o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��~q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���}o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h�� q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update e �r+��V��: � � e D�t � 55556c4993ccacf2204ccfa733c8e105f1bc1cd4accc50b36960aa8c6a339aeaD�s � 027f9ce824c240ccb21c3c503958433eb772483c1fe803ce30f44f232c06eaf4D�r � baf17e426a993485d612c72f85e502e6494151b0c2a6581a932bb3bddd9a2d65D�q � a1b2bb66bfc18162bd1422b81f7e29c65df69760c35e15b769b04c93743d3fd9D�p � dbdc73fdef9098f3a36034a34baac0fea56523a9d5f32161ee961570387e2ab1D�o � 841d060e918275386a6f0807073b7dfbf1d8b8ef4e46c4ac35317a6f61457d8eD�n � 0fcf726d57a4432750417154846f7c22cecf1bd6d6e09cbccc91d48290d7d69fD�m � 18ff9230e89f660287403152d255b18ab93e778ca6eb16560d9f2a33b716775fD�l � a4f562d2bfa43893cbae16d48549de733cb308300b8e00392e586a0a8337ba28D�k � 2945d0d59bd61b57919da46f45e6437971f4b5d914e30049df9465e3f9159275D�j � 5c8c85c382c8ac22f1c5330ee708bcb6604c6ac08bd86bb0cecc265c1123d786D�i � b9f7953bb8ad08f44b13f7946b99015a8a305f7022e1575b7243c15e252d3cfdD�h � bc347437d264c256ccfc842e7dd7fc5bfc2649f300c61c63b59dc2676631e404 � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h�� q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h�� q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��!o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��"o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���%q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��$q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���#o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��(q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��'q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��&q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��)o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��*o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��+o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��,o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���/q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��.q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���-o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] bR "tRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ "��g "��h "��i "��l "��o "��p "��q "��r "��s "��v "��y "��z "��{ " ��| " �� " �� " �� "!�� ""�� "#�� "$�� "%�� "&�� "'�� "(�� ")�� "*�� "+�� ",�� "-�� ".�� "/�� "0�� "1�� "2��! "3��" "4��% "5��( "6��) "7��* "8��+ "9��, ":��/ "<��2 "=��3 ">��4 "?��5 "@��8 "A��; "B��< "C��= "D��> "E��? "F��B "G��E "H��H "I��J "J��L "K��O "L��R "M��T "N��V "O��Y "P��\ "Q��_ "R��b "S��c "T��d "U��g "V��i "W��l "X��m "Y��n "Z��p "[��r "\��u "]��v "^��w "_��y "`��| "a�� "b�� "c�� "d�� "f�� "g�� "h�� "i�� "j�� "k�� "l�� "m�� "n�� "o�� "p�� "q�� "r�� "s�� m �� m � ��2q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��1q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��0q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��3o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��4o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��5o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���8q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��7q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���6o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��;q�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��:q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��9q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��<q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��=o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��>o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��?o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Bq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Aq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���@o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Eq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Dq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Cq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��Ha� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��Ga�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��Fq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��Ja� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��Ia�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��Lg�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��Kc�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��Og� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��Ng�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���Mg�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��Ra� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��Qa�} �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��Pg�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t��Ta� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��Sa�s �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��Vg�; �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��Uc�] �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��Yg� �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��Xg�{ �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���Wg�' �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��\i�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��[i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��Zg�w �Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��_o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��^k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��]i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��ao�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��`o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��co�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��do�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��gi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��fi�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��ei� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��io�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��hk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��lo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��ko�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��jo�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��mo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��no�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��pi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��oi�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��ro�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��qk�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��uo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��to�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��so�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��vo�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��wo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��yi�s �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��|o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��{k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��zi� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��~o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��}o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] e �r+��V��: � � e D� � be758c7001ddef751029603c28bb7e9f4c05b54b45fdf3ce79e59de8ae0d7426D� � 8747532845b7b53c68c46cbd4ae380333a36f007a086d57f8e04ec356181bc5dD� � e7dfe1246a7bc34d021885e09adac136307a97c7a0acc867665ed6f71b091d48D�~ � 2b1dab8460db8d4ed73a10ff93169013dc92d4a6925455ed9bafce32fb719ae7D�} � 2ab47339de73a640409073095dc5c6953e2918938b772d47f1402c12c8954584D�| � cb8ea18480b29a851f5294a367ac6b15344338149139ef7f7230a7888c960c7dD�{ � 4110581b81ae9c5b81888451ef2d92b364bd02c2919a96ed2f541d4b690b1932D�z � d3025de9185bb10743b56de3b1a535e26b438db0b43bb7d1b8859d2681a8a2c4D�y � d31bb4f7fa204fe5abb6eb2d32b3dbf61485358f507f608be3bec49ef46e3e5eD�x � 5016630a65d39bcfb9fe686d8dda94e2b896afc8b8c41f7c29a6bc5d3305884eD�w � 40fbdb5955ea06836fc5cd49841d43c8ca177c4a345a3731b7fdcb0e482fcde0D�v � 6c6c39f0c94adba5ee8c50460abf33d8b6c2d1741b4e3882ed1436af7ced0d88D�u � eb03c3bd51b0bec375b458b8d72953391f35f59d1ffa7969433da6b1fecf8867 � � �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x�� i� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-�� o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y�� o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-�� o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��!o�; �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� �� q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��$o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��#o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��"o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��%o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��&o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��'o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��(o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��+o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��*q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���)o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��.o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��-o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��,o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��/o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��0o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��1o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���4q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��3q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���2o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��7o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��6o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��5o�' �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��8o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��9o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��:o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��;o�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���>q�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��=q�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���<o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��Ao�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��@o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��?o�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��Bo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Co� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Do�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Gq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Fq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Eo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��Jo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Io�{ �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��Hq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��Ko�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Lo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Mo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��No�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Qq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Pq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Oo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��To�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��So� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��Rq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��Uo�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Vo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Wo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Zq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Yq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Xo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��]o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��\q� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��[q�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��^o�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��_o�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��`o� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��ao�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���dq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��cq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���bo� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��go�w �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��fq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��eq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update bR "�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ "u�� "v�� "w��! "x��$ "y��% "z��& "{��' "|��( "}��+ "~��. "��/ "���0 "���1 "���4 "���7 "���8 "���9 "���: "���; "���> "���A "���B "���C "���D "���G "���J "���K "���L "���M "���N "���Q "���T "���U "���V "���W "���Z "���] "���^ "���_ "���` "���a "���d "���g "���h "���i "���j "���m "���p "���q "���r "���s "���t "���w "���z "���{ "���| "���} "��� "��� "��� "��� "��� "��� "��� "��� "��� "��� "��� "��� "��� "��� "��� "���! "���$ "���' "�* "Á�+ "ā�, "Ł�/ "Ɓ�1 "ǁ�4 "ȁ�5 "Ɂ�6 "ʁ�8 "ˁ�: "́�= "́�> "�? "ρ�A "Ё�D "с�G "ҁ�H "Ӂ�I "ԁ�K "Ձ�M "ց�P "ׁ�Q "�R " " �Y��ho�E �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��io� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��jo�m �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���mq�9 �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��lq�O �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���ko� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��pq�Q �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��oq� �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��nq�a �Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��qo�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��ro�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��so� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��to�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���wq�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��vq�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���uo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��zq�Q Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��yq� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��xq�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��{o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��|o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��}o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���~o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��q� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] e �r+��V��: � � e D� � 1be054e17c50261a454bf852731c5ce00520ff292c6811df3d49ab473f540a41D� � 4b4af671ab41596e55314e4e7f8cb70452287460fc44b844405f9035b7823f84D� � 5d59acc61e4c24682f9a5b9b41b1c5f8974de87c4a1fb4e029e9131a51888c38D� � 82615b5f75a4fb89fd8a9662bc57f478e82e61656145912b4cf6dc7349a9b42dD� � 2735ed4ad4e07e41a6e6b59da981af90e90b0bb1e85343189ce011e147af53ccD� � d16ae7c3c974cef652ff9b87037d3450587a3df6ff7e04c65cade8d7bdebe945D� � 59502bb5d4a7b0894afa700c66752b3529c815f645f28c3b1c2b321d7ddd2629D� � 7e8e536933fb7b0d5a5fc7670bcd56337af338f221f564415328864f937088adD� � ddcaa350e33d1c8dbffab5d04b8b98a223178542f0bbbc0bffdae33e41b18241D� � 8c178f2dd6153d2d3dcfef1a3398ac4285de7accb9561c9a03366def1b7c2aa3D� � f6d493768ae9d25baa9e023ca6cee4fb1666c5cbd53f8c18631342dc3e38f221D� � 684dee15b7f2949d1127299fe87e939137acab9c8ab3a3b6ad0e0604573ea8a2D� � c03dc4d5e3cc2cadf7460b3f8fd8f02f0716c8e9ab44b6c38b6ac28113d2f65d " " �Y��o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � �� q�Q Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|�� q� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h�� q�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��a� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��a�} Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��q� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��a� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��a�s Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��g�; Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��c�] Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��g� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��g�{ Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���g�' Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��a� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��a�} Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��g�w Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t�� a� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��a�s Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P�� g�; Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_�� c�] Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��!g� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p�� g�{ Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)��� g�' Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��$i�s Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��#i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��"g�w Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��'o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��&k�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��%i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��*o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��)o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��(o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��+o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��,o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��/i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��.i�s Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��-i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��1o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��0k�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��4o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��3o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��2o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��5o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��6o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��8i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��7i�s Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��:o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��9k�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��=o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��<o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��;o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��>o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��?o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��Ai�s Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��@o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��Do�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Ck�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��Bi� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��Go� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Fo�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Eo�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Ho�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Io�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��Ki� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��Jo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��Mo�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Lk�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Po� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Oo�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��No�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Qo�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Ro�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��So� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��Ui� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��To�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��Wo�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Vk�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Zo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Yo�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Xo�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��[o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��\o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��]o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��^o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��ao�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��`o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��_o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��co�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��bo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��do�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��eo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��fo�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��io�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��hq�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���go� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��lo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��ko�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��jo�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��mo�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��no�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��oo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��po�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��so�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��rq�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���qo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��vo�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��uo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��to�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��wo�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��xo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��yo�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���|q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��{q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���zo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��~o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��}o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2�� o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] e �r+��V��: � � e D� � 45ea6e4e3244ee8c391939ed27d9667af07cbcf7e683b8241c444b5dc4340f93D� � caf6cf5af9791e8fd3e3612202b1fe3208956e0f50b7add46fc8761ba8265cc3D� � b77480a5bbcbb658aa18aaa138438f5924d6978f45f40b09f5958c6479004c18D� � c43dc5cc0d5557e10da9f67c4460ea748ef4efdd5608a73b33c14113ebe7dd76D� � 225dcf54b58bc05175127f8b4645952fb99ba04b377f788b193dd25888a029efD� � 970bcc7ec1c59c73d7a05a3364494e66e1a3bc0882edd7eb63d85aebcd8c059fD� � c48a58dcffbae76ac3c3c2d01d36951eb5a8df91ec715371c54637f6cdeb4f19D� � 1bf8bba46b2c5ea348a5a25ac9f2104263ce970c23bc3860e64178099e215f79D� � 1de65c5f5091d176efefe324dee42e11290463e4e9d6a45c2bafe24ff7a3a8e7D� � 105a6b516b3b76e51de1f49c194fc9e35f3a871f57878abbb5b6a53bc54dbc8cD� � 9a1fd5f559898dbaf4d03b56d97b096c2b79fc34289877bfec44204cca9aa895D� � 87fe3fb7cde1d8eee7a0811446e9f57ce979666bc9e6e29ac3cc9efc60d86d02D� � 57060ad1d840d5c5b714fe83a3d14486758cf9d186bea54eeb40b00a53427f02 � � �2�� o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y�� o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-�� o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��q�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2�� o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��q�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y�� o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] bR #>RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ "ځ�U "ہ�W "܁�Z "݁�[ "ށ�\ "߁�] "��^ "��a "��c "��d "��e "��f "��i "��l "��m "��n "��o "��p "��s "��v "��w "��x "��y "��| "�� "�� "�� "��� "��� "��� "��� "��� "��� "��� "��� "��� "��� # �� #�� #�� #�� #�� #�� #�� #�� # ��" # ��% # ��& # ��' # ��( #��) #��, #��/ #��0 #��1 #��2 #��5 #��8 #��9 #��: #��; #��< #��? #��B # ��C # ��D # ��E # ��H # ��K #!��L #"��M ##��N #$��O #%��R #&��U #'��X #(��Z #)��\ #*��_ #+��b #,��d #-��f #.��i #/��l #0��o #1��r #2��s #3��t #4��w #5��y #6��| #7��} #8��~ #9�� #:�� #;�� #<�� #=�� : : �A�� o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-�� o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���"q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��!q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��%o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��$q� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��#q�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��&o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��'o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��(o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��)o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���,q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��+q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���*o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��/o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��.q� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��-q�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��0o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��1o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��2o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���5q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��4q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���3o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��8q�Q Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��7q� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��6q�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��9o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��:o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��;o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��<o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���?q�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��>q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���=o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Bq�Q Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Aq� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��@q�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��Co�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Do� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Eo�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Hq�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Gq�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Fo� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Kq�Q Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Jq� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Iq�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��Lq� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��Mo�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��No� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Oo�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Rq�9 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Qq�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Po� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��Uq�Q Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��Tq� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��Sq�a Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��Xa� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��Wa�} Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��Vq� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��Za� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��Ya�s Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��\g�; Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��[c�] Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��_g� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��^g�{ Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���]g�' Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��ba� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��aa�} Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��`g�w Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t��da� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��ca�s Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��fg�; Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��ec�] Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��ig� Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��hg�{ Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���gg�' Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��li�s Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��ki� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��jg�w Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��oo�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��nk�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��mi� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��ro� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��qo�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��po�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��so�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��to�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��wi� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��vi�s Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��ui� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��yo�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��xk�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��|o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��{o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��zo�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��}o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��~o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x�� i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��i�s Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-�� i�s Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] e �r+��V��: � � e D�( � ec526953368001477a55a50c3cc2a5d51c651ebf782ccc4a61d9c0cd7dd37edaD�' � 219e0773f6cf831ca0c2983c48e45797cf1ed6150a23e416cebe02b6c43d5d35D�& � 0575f05deb1df2512ee0e962ca3a090704d98dca573c138f4280f758c83cc88aD�% � 94700baa2330493c2173bb7d59f922ff0cf174e02a7abbada312d73458b2870fD�$ � c5cb7460760e2885f04cef6e4c190e295bc38c25d8654fc325e8b08c5f835ffdD�# � 3494247306924b94b55f3da45af759539e2b9710c85996ca25ee2b838ccaf8d9D�" � 0bbfce2dd7e12ca5610015aba9f167cbc4cc29d360a77f3801b7508618bb17fbD�! � 28a4508ffc1c1668b23b1b346fa1d8f6999482b63898c282fcc25247623bd55eD� � 7fdb130eab949bc403e1c3601e83e6c3cbc7954955279ba1bea21124e1e5de38D� � 5ee8683f8c93ce6cd407d16531478f99660fed0dd9f582ce317a1aeb518e6484D� � f8276a4628fde1b9537d7805763e64371f666ae7c100b439e3e89016471525d9D� � ebfa2d89f68f1f01852d54bde30581583c8843675d4c7bd6d2d5474a0d29fc5aD� � f94a030f57e0305ea48372f1b189a3297e92fb634475062f758ad5de5eec967e C �� C �T�� o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c�� k�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex�� i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� �� o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��k�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x�� i� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-�� o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T�� o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c�� k�] Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��"o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��!o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� �� o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��#o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��$o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��%o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��&o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��)o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��(o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��'o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��+o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��*o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��,o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��-o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��.o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] |� �T��1o�; Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]� ��0q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���/o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��4o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��3o�{ Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��2o�' Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��5o�w Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��6o�E Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��7o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��8o�m Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��;o�' !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��:q�O Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���9o� Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��>o�w !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��=o� !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��<o�{ !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��?o�E !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��@o� !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Ao�m !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Dq�9 !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Cq�O !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Bo� !Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] w qx w �|��Go� "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Fo�{ "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Eo�' "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Ho�w "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Io�E "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Jo� "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��Ko�m "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Nq�9 "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Mq�O "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Lo� "Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��Qo�w #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��Po� #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Oo�{ #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��Ro�E #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��So� #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] bR #�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ #@�� #A�� #B�� #C�� #D�� #E�� #F�� #G�� #H�� #I�� #J�� #K�� #L��" #M��# #N��$ #O��% #P��& #Q��) #R��+ #S��, #T��- #U��. #V��1 #W��4 #X��5 #Y��6 #Z��7 #[��8 #\��; #]��> #^��? #_��@ #`��A #a��D #b��G #c��H #d��I #e��J #f��K #g��N #h��Q #i��R #j��S #l��T #m��W #n��Z #o��[ #p��\ #q��] #r��^ #s��a #t��d #u��e #v��f #w��g #x��j #y��m #z��n #{��o #|��p #}��q #~��t #��w #���x #���y #���z #���} #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #��� #���" #���$ #���' #���* #���, #���. #���1 #���4 #���7 #���: #���; #���< N N �-��To�m #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���Wq�9 #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��Vq�O #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���Uo� #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��Zo� $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Yo�{ $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)�h��Xq�a #Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��[o�w $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��\o�E $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��]o� $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��^o�m $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���aq�9 $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��`q�O $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���_o� $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��do�w %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��co� %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h��bq�a $Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��eo�E %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��fo� %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��go�m %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���jq�9 %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��iq�O %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���ho� %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � �� � �|��mo� &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�|��lq� %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��kq�a %Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��no�w &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��oo�E &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��po� &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��qo�m &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���tq�9 &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��sq�O &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���ro� &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��wo�w 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��vq� &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��uq�a &Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��xo�E 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��yo� 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��zo�m 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���}q�9 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��|q�O 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���{o� 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � �� q�Q 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��~q�a 'Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �2��o�w (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��o�E (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � �� q�Q (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|�� q� (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a (Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update e �r+��V��: � � e D�5 � 7d581bf8155fdcfdd7570ca3bd524e4ab64b42a8bcbfe776cc2d97ca9fd25264D�4 � 5cdfe7f1d4c546122d7808d352018750bdf5bdc270398c9f41c3414349e3f861D�3 � fc910dd4afd1311d8be1bdce2147613448f4162c19797bb345c5b725efff1d08D�2 � f3aa08ddf57c680c2b4642a22c261e11569a25f83c746d38afc1173fef7580f0D�1 � 1cd646bb6272d044e00b987d196c13c7541d1e953946dd96356956e301fda53fD�0 � cfcfe9d9ae37170dc134b041696f09f451bb92f77ec37a8f19b080810bd0f006D�/ � 4d7007f3cf68064e511dec0623843f0d41c7dee3f69d1b581ca0a6e9069cf098D�. � 5b750b8f5db8f4ebe68335063aeb85fc0c687063ea49ab0c7ba1275baf6245c9D�- � b3cd6ec6014704060af86c8caa9a9ecbd7c3c5c0ca064b886bda0a31117ad014D�, � 82f985084dd4473e97f352c4919005eac36a824d8c9490c80095912a2f94e3c5D�+ � b7e3524e3d408eca2c519e323f8b8841358c3ee89c7362d30b856ed807a0cad7D�* � 6d3e0ab4e00db4dbaa9adaaeda6959ba06c02854163d2f14ce6376153c971409D�) � 6167999a4aa9b0b7fd775e20f7868e663374c2934e84072c1c95adbb617120f3 " " �Y�� o�E )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A�� o� )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-�� o�m )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��q�Q )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��q� )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � � �=��q� )Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] " " �Y��o�E *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � �� q�Q *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|�� q� *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y�� a� +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.�� a�} +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=�� q� *Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��"a� +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��!a�s +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��$g�; +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��#c�] +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��'g� +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��&g�{ +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���%g�' +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � �� � �y��*a� ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��)a�} ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�.��(g�w +Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target � R� t��,a� ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��+a�s ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��.g�; ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��-c�] ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��1g� ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��0g�{ ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���/g�' ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��4i�s -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��3i� -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��2g�w ,Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��7o�; -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��6k�] -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��5i� -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��:o� -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��9o�{ -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��8o�' -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��;o�w -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��<o�E -Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � �L � x��?i� .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��>i�s .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��=i� .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process. � � �T��Ao�; .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��@k�] .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Do� .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Co�{ .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Bo�' .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Eo�w .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Fo�E .Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��Hi� /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��Gi�s /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��Jo�; /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Ik�] /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Mo� /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Lo�{ /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Ko�' /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��No�w /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Oo�E /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � : � �-��Qi�s 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�A��Po� /Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] C �� C �T��To�; 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Sk�] 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��Ri� 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��Wo� 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Vo�{ 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Uo�' 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Xo�w 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Yo�E 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��[i� 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��Zo� 0Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��]o�; 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��\k�] 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��`o� 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��_o�{ 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��^o�' 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��ao�w 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��bo�E 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��co� 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � N � x��ei� 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��do�m 1Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � � �T��go�; 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��fk�] 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��jo� 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��io�{ 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��ho�' 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��ko�w 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��lo�E 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��mo� 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��no�m 2Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] � �t��qo�{ 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��po�' 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target�T��oo�; 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] � �� �2��so�w 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��ro� 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) " " �Y��to�E 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��uo� 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��vo�m 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] I |� I � ��yo�' 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target� ��xq�O 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���wo� 3Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��|o�w 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��{o� 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��zo�{ 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��}o�E 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��~o� 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� 4Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] � � �2��o�w 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��o� 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��o�{ 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete) " " �Y��o�E 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down��� o� 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] bR $ RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ #���A #���D #���E #���F #���H #���J #���M #���N #���O #���Q #���T #���W #���X #���Y #���[ #���] #���` #���a #���b #���c #���e #���g #���j #���k #���l #���m #���n #���q #���s #�t #Á�u #ā�v #Ł�y #Ɓ�| #ǁ�} #ȁ�~ #Ɂ� #ʁ� #ˁ� #́� #́� #� #ρ� #с� #Ӂ� #ԁ� #Ձ� #ց� #ׁ� #� #ف� #ځ� #ہ� #܁� #݁�! #ށ�" #߁�# #��& #��) #��, #��. #��0 #��3 #��6 #��9 #��< #��= #��> #��@ #��B #��E #��F #��G #��I #��K #��N #��O #��P #���Q #���U #���^ #���g #���o #���x #��� #��� #��� #��� $ ��% $��. $��7 $��? $��H $��Q $��Z $��c $��l $ ��s [ �� [ �2��o�w 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|�� o� 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�h�� q�a 5Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update e �r+��V��: � � e D�B � 00ee764e0982d01d4e6bb4be901fe9d45e00ba81aada6ca3196a2f4c6a633f63D�A � 5e7c13e7ca9ceba3ee4769206f16397f62fe367684d347573b551f0ff2c8fd6dD�@ � 124996a9073a9ca8c3f0c37ffc32039a2cdb8a8eb5ae0de982fc65de11708c2cD�? � 5cdd011988bd5f786fd69bb2f85ee35ad72937f71784e3c1b95f7eaad14b4e71D�> � cc499773d5b8e2ef0f1585f8f54cda5bdf26720005e766f1ad4fa13b420b5f7aD�= � a2747777a7c3d1ef8019b71132c4a6eb6e5a8363b7b085140da95747f86c10afD�< � 4705cdec550031f6ee8f3f2c0c78c72c88ec88a70a3c20ebb27eea168bfdd9afD�; � 405c83aec688febd1c01afeb7dcce3417c406be86016fef5342ad46668393522D�: � 9454700c32cd463eb0cc88eb843acc8c9da791accd71ed786c92357f2403b784D�9 � 4ff26a4c002984d75b6bf2b0150de3b528864e2ce86be2ab94743d10ddef1544D�8 � f547d5c45db4604dbe0d39eae1befa3f083f7d65e124d7458ba4032e3ab8a287D�7 � 9a702b71630a1f6857d6968df97b744cb45fd56fec8f16edbef0148661381390D�6 � d39bb4b8585a8c347658eb0e4b8c573ecb73f3bbb4c1b07af1b30a7d8cacce0c " " �Y��o�E 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���q�9 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��q�O 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] [ �� [ �2��o�w 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target�|��q� 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��q�a 6Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��o�E 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��o� 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��o�m 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ��� q�9 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� �� q�O 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���o� 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � �� q�Q 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|�� q� 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h�� q�a 7Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update " " �Y��!o�E 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��"o� 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] N N �-��#o�m 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] ? |� ? ���&q�9 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11a�(@- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot. - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)� ��%q�O 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10a��- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down���$o� 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9a�- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z] - Resolves: rhbz#1968330 - id lookup is failing intermittently - Resolves: rhbz#1964415 - Memory leak in the simple access provider - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z] m �� m � ��)q�Q 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14cs@- Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z] - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z] - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]�|��(q� 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13b�2@- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z] - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]�h��'q�a 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12a��@- Resolves: rhbz#2006382 - IPA Intermittence fetching groups - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names. - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update � �� � �y��,a� 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��+a�} 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6^��- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen�=��*q� 8Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15c� @- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] � R� t��.a� 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�)��-a�s 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �P��0g�; 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�_��/c�] 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False � u� � �x��3g� 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�p��2g�{ 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)���1g�' 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target �� �-��6i�s :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages).�}��5i� :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-7^�m@- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.�.��4g�w 9Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target C �� C �T��9o�; :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��8k�] :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is Falsex��7i� :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization w qx w �|��<o� :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��;o�{ :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��:o�' :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��=o�w :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��>o�E :Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � N� x��@i� ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�-��?i�s ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-8^�V@- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration. - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers. It is done in two steps (two different nsupdate messages). � � �T��Bo�; ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Ak�] ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��Eo� ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Do�{ ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Co�' ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Fo�w ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Go�E ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] � :� x��Ii� <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-9^�@- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization�A��Ho� ;Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] � � �T��Ko�; <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.1_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]�c��Jk�] <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10^�3�- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False w qx w �|��No� <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again))�t��Mo�{ <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3_=@- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete)� ��Lo�' <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2_;�- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z] - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] - just bumping the version to build for proper target � � �2��Oo�w <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5_H�- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z] (Previous attempt to fix this issue was incomplete (again)) - just bumping the version to build for proper target " " �Y��Po�E <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6_�G@- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z] - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z] - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z] - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z] - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z] - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z] - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z] - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z] : : �A��Qo� <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7_� �- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z] - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z] - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z] E N � E h��UM� =Gris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��TMg =Gris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��SM1 =Gris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�-��Ro�m <Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8`��@- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z] - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z] - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z) - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z] - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z] D �A�d�� � � D X��^Mg >Gris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��]M1 >Gris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��\e�c =Tony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��[em =Tony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��Zew =Tony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��Yew =Tony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��Xeq =Tony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��We1 =Tony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��VQ� =Gris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515) 4 �"�h�� u 4 =��gM1 ?Gris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��fe�c >Tony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��eem >Tony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��dew >Tony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��cew >Tony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��beq >Tony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��ae1 >Tony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��`Q� >Gris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��_M� >Gris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin. � �8�y �, � g��oem ?Tony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��new ?Tony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��mew ?Tony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��leq ?Tony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��ke1 ?Tony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��jQ� ?Gris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��iM� ?Gris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��hMg ?Gris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458) C X�O��# � C l��xew @Tony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��wew @Tony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��veq @Tony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��ue1 @Tony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��tQ� @Gris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��sM� @Gris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��rMg @Gris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��qM1 @Gris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��pe�c ?Tony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665 H ���P�r% � H l��ew ATony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i�� eq ATony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��e1 ATony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��~Q� AGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��}M� AGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��|Mg AGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��{M1 AGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��ze�c @Tony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��yem @Tony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin. H �%}<�t � H i�� eq BTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I�� e1 BTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��Q� BGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��M� BGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��Mg BGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��M1 BGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��e�c ATony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��em ATony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��ew ATony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678 E � � �p � E I��e1 CTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��Q� CGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��M� CGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��Mg CGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��M1 CGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��e�c BTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g�� em BTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l�� ew BTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l�� ew BTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735 e �r+��V��: � � e D�O � a59b71df5f20f5b5cbdbc96ff9c1388cc6a2ae20c74c5c924f364b4150653748D�N � 1a901043d59b38297076c304b82d8cf36fa295747a7273a0009f8566a93e0988D�M � a44afb9ad79ce59c97899e5be3660c4d4dbd20f0aa44417e9f820995db76c42bD�L � 5eaba3f50062813592c389ebb343e248af7f03caee550d7cab3599bd3e6847d4D�K � 16cc8bcd9289899b14393eedecdb5d31b11e6a4d0c504f593037804de5878fceD�J � c4ae76d7c6a23e9345f969ab95acd6dee04900b227f0de925cc539ffeb60c2e7D�I � 7c5dcd2035ff3f4503debbaeecc9659798c5a4cc8626f9cb089451584f53fefcD�H � b18eeaf97c8e575f6c91cac0852221503010783f1b05f5c71ba0566e0569c473D�G � c3e8755371c95986d3d9b24ce2a85e7158f92f26160148570b73b95ab7cc341cD�F � 22a2f90a540cd9a8330a6a4c96da322865926757812e4c0fdfea538a351e6f5aD�E � 02f39c31f6b85c556cb651767e2383c2bac89bab5627ec18df62fd758577a348D�D � a2e16e3449f1d216456cce32c996514ef5ca92cbe8e4e01823b44edb2054748fD�C � f8d5011b3c0674720d0b3957a9b73860210ff186379452e0225431f7619a349f % �#�H�_ � % n�� Q� DGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��M� DGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��Mg DGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��M1 DGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��e�c CTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��em CTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��ew CTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��ew CTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��eq CTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3 J �F�f�S � J h��%M� EGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��$Mg EGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��#M1 EGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��"e�c DTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��!em DTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l�� ew DTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l�� ew DTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i�� eq DTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I�� e1 DTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2 D �A�d�� � � D X��.Mg FGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��-M1 FGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��,e�c ETony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��+em ETony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��*ew ETony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��)ew ETony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��(eq ETony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��'e1 ETony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��&Q� EGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515) 4 �"�h�� u 4 =��7M1 GGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��6e�c FTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��5em FTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��4ew FTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��3ew FTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��2eq FTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��1e1 FTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��0Q� FGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��/M� FGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin. � �8�y �, � g��?em GTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��>ew GTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��=ew GTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��<eq GTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��;e1 GTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��:Q� GGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��9M� GGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��8Mg GGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458) C X�O��# � C l��Hew HTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��Gew HTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��Feq HTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��Ee1 HTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��DQ� HGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��CM� HGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��BMg HGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��AM1 HGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��@e�c GTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665 H ���P�r% � H l��Qew ITony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��Peq ITony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��Oe1 ITony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��NQ� IGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��MM� IGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��LMg IGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��KM1 IGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��Je�c HTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��Iem HTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin. H �%}<�t � H i��Zeq JTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��Ye1 JTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��XQ� JGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��WM� JGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��VMg JGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��UM1 JGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��Te�c ITony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��Sem ITony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��Rew ITony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678 E � � �p � E I��ce1 KTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2n��bQ� KGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��aM� KGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��`Mg KGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��_M1 KGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��^e�c JTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��]em JTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��\ew JTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��[ew JTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735 % �#�H�_ � % n��lQ� LGris Ge <fge@redhat.com> - 1.6.2-4[�-�- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)h��kM� LGris Ge <fge@redhat.com> 1.6.2-3[GB�- Fix rpm runtime dependency of libstoragemgmt-local-plugin.X��jMg LGris Ge <fge@redhat.com> 1.6.2-2[2*�- Silence socket EPIPE error. (RHBZ #1582458)=��iM1 LGris Ge <fge@redhat.com> 1.6.2-1Z��- Upgrade to 1.6.2�#��he�c KTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��gem KTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��few KTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��eew KTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��deq KTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3 � �F�f�S � V��s[U MDavid Shea <dshea@redhat.com> - 0.4.1-3R��- Added a glade catalog file (dshea)�#��re�c LTony Asleson <tasleson@redhat.com> - 1.8.1-2`�- https://bugzilla.redhat.com/show_bug.cgi?id=1872745 - https://bugzilla.redhat.com/show_bug.cgi?id=1903665g��qem LTony Asleson <tasleson@redhat.com> - 1.8.1-1]R�@- Upgrade to 1.8.1 - Obsolete the netapp plugin.l��pew LTony Asleson <tasleson@redhat.com> - 1.7.3-3\��@* https://bugzilla.redhat.com/show_bug.cgi?id=1693678l��oew LTony Asleson <tasleson@redhat.com> - 1.7.3-2\g�@* https://bugzilla.redhat.com/show_bug.cgi?id=1629735i��neq LTony Asleson <tasleson@redhat.com> - 1.7.3-1\f��- Add nfs-utils as a dependency - Upgrade to 1.7.3I��me1 LTony Asleson <tasleson@redhat.com> - 1.7.2-1\2�- Upgrade to 1.7.2 � �}�{ � � R��y[M MDavid Shea <dshea@redhat.com> - 0.4.2-5T��@- Use GPLv3 for the license file���x�� MFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-4S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuildc��wia MKalev Lember <kalevlember@gmail.com> - 0.4.2-3S�R@- Rebuilt for gobject-introspection 1.41.4���v�� MFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild]��u[c MDavid Shea <dshea@redhat.com> - 0.4.2-1Sc��- New upstream release libtimezonemap-0.4.2� ��t[�a MDavid Shea <dshea@redhat.com> - 0.4.1-4R�v@- Merge fixes from lp:timezonemap - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane) - Set en_name correctly (iain.lane) - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane) ��; � ��~[�a NDavid Shea <dshea@redhat.com> - 0.4.1-4R�v@- Merge fixes from lp:timezonemap - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane) - Set en_name correctly (iain.lane) - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)V��}[U NDavid Shea <dshea@redhat.com> - 0.4.1-3R��- Added a glade catalog file (dshea)m��|ey MJiri Konecny <jkonecny@redhat.com> - 0.4.4-2b���- Remove regions from the map Resolves: rhbz#2098126�n��{[� MDavid Shea <dshea@redhat.com> - 0.4.4-1UL�@- Fixes for LP#1440157: Port to libsoup directly for geoname results Fix some memory leaks Do not reuse GCancellables - Upstream merges of SVG update and constrained location cycles���z[�+ MDavid Shea <dshea@redhat.com> - 0.4.2-6UCj�- Updated the time zone map images - Updated the city data from geonames.org - Fix a memory leak and potential crash with the locations list - Cycle through a smaller list of map locations on repeated clicks � ���� � ���[�+ NDavid Shea <dshea@redhat.com> - 0.4.2-6UCj�- Updated the time zone map images - Updated the city data from geonames.org - Fix a memory leak and potential crash with the locations list - Cycle through a smaller list of map locations on repeated clicksR��[M NDavid Shea <dshea@redhat.com> - 0.4.2-5T��@- Use GPLv3 for the license file����� NFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-4S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuildc��ia NKalev Lember <kalevlember@gmail.com> - 0.4.2-3S�R@- Rebuilt for gobject-introspection 1.41.4��� �� NFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild]��[c NDavid Shea <dshea@redhat.com> - 0.4.2-1Sc��- New upstream release libtimezonemap-0.4.2 $ �B � $ ��� �� OFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild]�� [c ODavid Shea <dshea@redhat.com> - 0.4.2-1Sc��- New upstream release libtimezonemap-0.4.2� ��[�a ODavid Shea <dshea@redhat.com> - 0.4.1-4R�v@- Merge fixes from lp:timezonemap - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane) - Set en_name correctly (iain.lane) - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)V��[U ODavid Shea <dshea@redhat.com> - 0.4.1-3R��- Added a glade catalog file (dshea)m��ey NJiri Konecny <jkonecny@redhat.com> - 0.4.4-2b���- Remove regions from the map Resolves: rhbz#2098126�n��[� NDavid Shea <dshea@redhat.com> - 0.4.4-1UL�@- Fixes for LP#1440157: Port to libsoup directly for geoname results Fix some memory leaks Do not reuse GCancellables - Upstream merges of SVG update and constrained location cycles : ���� � : m��ey OJiri Konecny <jkonecny@redhat.com> - 0.4.4-2b���- Remove regions from the map Resolves: rhbz#2098126�n��[� ODavid Shea <dshea@redhat.com> - 0.4.4-1UL�@- Fixes for LP#1440157: Port to libsoup directly for geoname results Fix some memory leaks Do not reuse GCancellables - Upstream merges of SVG update and constrained location cycles���[�+ ODavid Shea <dshea@redhat.com> - 0.4.2-6UCj�- Updated the time zone map images - Updated the city data from geonames.org - Fix a memory leak and potential crash with the locations list - Cycle through a smaller list of map locations on repeated clicksR�� [M ODavid Shea <dshea@redhat.com> - 0.4.2-5T��@- Use GPLv3 for the license file��� �� OFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-4S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuildc�� ia OKalev Lember <kalevlember@gmail.com> - 0.4.2-3S�R@- Rebuilt for gobject-introspection 1.41.4 e �r+��V��: � � e D�\ � cd00145bb9ec1111aeeef6a3549e8186d773009d553f2c6ed0b608e4fbd9adcfD�[ � d90d150799643440c4a06c356693a216dd240f7c4b21d95255e233cae0b23fe0D�Z � 2f6df5451338232fc54158e957a6c5e4c1ed718d22490cc1d0031abf1ddb128eD�Y � 7702850f4e2e80c04e6c3466c990e0b651afe9da7ec148a25504e6539b25fcfaD�X � 05a1afac9166ad0a6bd4d12f5586743519b206e5f4bb4ce59ee057b9dff7d92fD�W � 1430b03046652a896ccac617100d4beab44c1c13c0d245b9bffbfe91817ea027D�V � fb649db85a7fa03afc98ca05e61011b3c7d2d0ddfa11c9e025af979339542a81D�U � fdb87f18d9c02219b23bb7f3233d128374d7e17e958892065ed687a59f5aad38D�T � edc0594488f23ae7a46857065d3cd4d74e61a711b96dd5b99713419b033816a4D�S � 2eaa174ec4232e07070ccd4b7aee3cc74f51b5f55922176ea0fe278584f8dfdeD�R � f530a65c0efca53f618f63e02801129283b12266fbf21ac221e35617a45b0d4bD�Q � 4f723648476309de9070d25c30df94bf8d0ec5cc665cf947714768e3903e6677D�P � 7007758347481b5bd5b486012d4105aaa620968a412da55bf70e5eb5ee4ea52f - ��#�! � - R��[M PDavid Shea <dshea@redhat.com> - 0.4.2-5T��@- Use GPLv3 for the license file����� PFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-4S�@- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuildc��ia PKalev Lember <kalevlember@gmail.com> - 0.4.2-3S�R@- Rebuilt for gobject-introspection 1.41.4����� PFedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.2-2S���- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild]��[c PDavid Shea <dshea@redhat.com> - 0.4.2-1Sc��- New upstream release libtimezonemap-0.4.2� ��[�a PDavid Shea <dshea@redhat.com> - 0.4.1-4R�v@- Merge fixes from lp:timezonemap - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane) - Set en_name correctly (iain.lane) - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)V��[U PDavid Shea <dshea@redhat.com> - 0.4.1-3R��- Added a glade catalog file (dshea) � ��2 � k�� W� QKarel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��Wk QKarel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)m��ey PJiri Konecny <jkonecny@redhat.com> - 0.4.4-2b���- Remove regions from the map Resolves: rhbz#2098126�n��[� PDavid Shea <dshea@redhat.com> - 0.4.4-1UL�@- Fixes for LP#1440157: Port to libsoup directly for geoname results Fix some memory leaks Do not reuse GCancellables - Upstream merges of SVG update and constrained location cycles���[�+ PDavid Shea <dshea@redhat.com> - 0.4.2-6UCj�- Updated the time zone map images - Updated the city data from geonames.org - Fix a memory leak and potential crash with the locations list - Cycle through a smaller list of map locations on repeated clicks � >� � �\�� W�c QKarel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev�(�� W�{ QKarel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=�� W�% QKarel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failed G �& G �Z��"W�_ QKarel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit���!W�I QKarel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A�� W�- QKarel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information = �n � = �=��'W�% RKarel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��&W� RKarel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��%Wk RKarel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��$g�# QKarel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]�a��#W�m QKarel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory , Sr , �A��*W�- RKarel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��)W�c RKarel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev�(��(W�{ RKarel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login � l� � �a��-W�m RKarel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��,W�_ RKarel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit���+W�I RKarel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent. v �T�# v �(��2W�{ SKarel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��1W�% SKarel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��0W� SKarel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��/Wk SKarel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��.g�# RKarel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���5W�I SKarel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��4W�- SKarel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��3W�c SKarel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��7W�m SKarel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��6W�_ SKarel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit v �T�# v �(��<W�{ TKarel Zak <kzak@redhat.com> 2.23.2-60\R�@- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login�=��;W�% TKarel Zak <kzak@redhat.com> 2.23.2-59[z�@- fix #1618711 - exec option in mount unable to override the implicit noexec in user option - fix #1616264 - Login to emergency shell failedk��:W� TKarel Zak <kzak@redhat.com> 2.23.2-58[<��- fix #1594681 - [RHEL7.2] blkid does not output swap area_��9Wk TKarel Zak <kzak@redhat.com> 2.23.2-57["X�- add another ppc aliases to setarch (#1562125)�D��8g�# SKarel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] E � E ���?W�I TKarel Zak <kzak@redhat.com> 2.23.2-63]]2@- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.�A��>W�- TKarel Zak <kzak@redhat.com> 2.23.2-62]Ik�- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device - fix #1712768 - lsmem segfaults on ppc64 wih -o - fix #1690102 - setarch(8) does not check error return values properly. - fix #1734261 - lscpu not showing Physical socket, chips information�\��=W�c TKarel Zak <kzak@redhat.com> 2.23.2-61\��@- #1203378 - Cannot use swapon with fallocated XFS swapfile - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted - #1639465 - Bad formatting in agetty.8 man page - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work - #1678451 - Unable to mount to a directory that matches a dm device under /dev ; !; �a��AW�m TKarel Zak <kzak@redhat.com> 2.23.2-65^��@- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir - fix #1745657 - mismatch between spec file and uuidd runtime directory�Z��@W�_ TKarel Zak <kzak@redhat.com> 2.23.2-64^�k@- fix #1788896 - Internal testsuite: libmount tests failed - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid) - fix #1816183 - "mount -a" should ignore already mounted bind mounts. - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit [ �� [ �:��Ei� UJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��Di�' UJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��Ci�1 UJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)�D��Bg�# TKarel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1_м@- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z] - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z] - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z] � �� ���Hi�! UJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���Gi�) UJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Fi�a UJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��Ji�q UJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Ii�{ UJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) C 8� C �:��Ni� VJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��Mi�' VJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��LyW UJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Ky� UJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���Qi�! VJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���Pi�) VJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Oi�a VJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��Si�q VJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Ri�{ VJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��Vy�y VJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��UyW VJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Ty� VJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���Yi�! WJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���Xi�) WJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Wi�a WJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��[i�q WJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Zi�{ WJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��^y�y WJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��]yW WJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��\y� WJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���`y�/ WJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���_y�? WJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���ei�) XJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��di�a XJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��ci� XJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��bi�' XJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��ai�1 XJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��hi�q XJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��gi�{ XJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���fi�! XJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��li� YJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��ki�' YJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��jyW XJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��iy� XJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���oi�! YJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���ni�) YJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��mi�a YJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��qi�q YJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��pi�{ YJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��ty�y YJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��syW YJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��ry� YJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���wi�! ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���vi�) ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��ui�a ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��yi�q ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��xi�{ ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��|y�y ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��{yW ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��zy� ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���~y�/ ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���}y�? ZJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���i�) [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��i� [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G�� i�' [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��i�1 [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��i�q [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���i�! [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:�� i� \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G�� i�' \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��yW [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� [Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ��� i�! \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)��� i�) \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d�� i�a \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��i�q \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) bR $qRY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ $ ��~ $ �� $ �� $�� $�� $�� $�� $��" $��' $��* $��- $��2 $��5 $��7 $��< $��? $ ��A $ ��E $ ��H $ ��J $ ��N $!��Q $"��S $#��V $$��Y $%��[ $&��^ $'��` $(��e $)��h $*��l $+��o $,��q $-��t $.��w $/��y $0��| $1��~ $2�� $3�� $4�� $5�� $6�� $8�� $:�� $;�� $<�� $=�� $>��! $?��$ $@��( $A��, $B��. $C��2 $D��5 $E��7 $F��: $G��> $H��A $I��D $J��G $K��I $L��L $M��N $N��Q $O��S $P��V $Q��X $R��] $S��` $T��d $U��g $V��i $W��l $X��o $Y��q $Z��t $[��v $\��{ $]��~ $^�� $_�� $`�� $a�� $b�� $c�� $d�� $e�� $g�� $h�� $i�� $j��# $k��% $l��( $m��+ $n��- $o��0 $p��2 8� �8��y�y \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��yW \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� \Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) e �r+��V��: � � e D�i � 30da7f395230fa024303c27e46e2a5133d77edaece70586694945a12275a23f2D�h � 6907d4d091a1107f3bf16ccdbf5e24663641bba18bd965f06812680002457959D�g � dba6657dac2be85cbc8f4e111f952c8a9b31b95116671a599320b57503781a49D�f � 79f1fedc8c8be3af6f1d989940ed7d956d779d3f488f821b4f08032ed83b1f3bD�e � 06bc77dd6c2f2125c8f8ccb6b4e685a71d97e6defb84eb1d696ee180ac974e06D�d � d1afd88393ffa5ac982a19f815f212f48fb963ea78add0832a9de497411e2322D�c � 03e1baf0c1c94f364478eb3cd7d75ad83408dfe993ea8a69481c7f963ebb1cc3D�b � 146ca869c5ba405509685e617aa2689cda961f933ee72947d61013803f3d5fb8D�a � faf0e74d26792022e70a474776f33b0d995899e1d6150d742af9199b9cce5376D�` � 6aef55f22ccae6cb279470d28bd97b90a8ac51e8d3c01f08c9363be80465a5edD�_ � cbb9fd109a25fe1c52b74144b6c1416666fbfd38ad1fd70a31ad0f95e9ded252D�^ � b8df7b9911c734e2423d1ebb0116de9bc8b43bfbad024df88e3441f422aa93ffD�] � 592f30134c5a086d2102c5e64047ef6d7c337e0cc5d5350cc6f763992cdde4a1 � �� ���i�! ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���i�) ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��i�q ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��y�y ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��yW ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ��� y�/ ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���y�? ]Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���!i�) ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d�� i�a ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:�� i� ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G�� i�' ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L�� i�1 ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��$i�q ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��#i�{ ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���"i�! ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) 1 8� � 1 �G��(i�' _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��'i�1 _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)f��&yW ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��%y� ^Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � AX� � ���,i�! _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���+i�) _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��*i�a _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��)i� _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204) �l��.i�q _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��-i�{ _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) C 8� C �:��2i� `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��1i�' `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��0yW _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��/y� _Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���5i�! `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���4i�) `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��3i�a `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��7i�q `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��6i�{ `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��:y�y `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��9yW `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��8y� `Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � 4u� � ���>i�) aJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��=i�a aJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��<i� aJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��;i�' aJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181) � �l��Ai�q aJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��@i�{ aJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���?i�! aJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) 8� �8��Dy�y aJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��CyW aJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��By� aJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���Gi�! bJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���Fi�) bJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Ei�a bJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��Ii�q bJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Hi�{ bJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��Ly�y bJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��KyW bJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Jy� bJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���Ny�/ bJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���My�? bJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) � �� ���Qi�! cJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���Pi�) cJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Oi�a cJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��Si�q cJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Ri�{ cJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��Vy�y cJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��UyW cJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Ty� cJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���Xy�/ cJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���Wy�? cJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���]i�) dJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��\i�a dJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��[i� dJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��Zi�' dJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��Yi�1 dJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��`i�q dJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��_i�{ dJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���^i�! dJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��di� eJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��ci�' eJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��byW dJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��ay� dJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���gi�! eJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���fi�) eJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��ei�a eJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��ii�q eJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��hi�{ eJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��ly�y eJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��kyW eJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��jy� eJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���oi�! fJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���ni�) fJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��mi�a fJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��qi�q fJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��pi�{ fJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��ty�y fJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��syW fJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��ry� fJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���vy�/ fJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���uy�? fJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���{i�) gJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��zi�a gJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��yi� gJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��xi�' gJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��wi�1 gJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��~i�q gJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��}i�{ gJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���|i�! gJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��i� hJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��i�' hJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f�� yW gJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� gJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���i�! hJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���i�) hJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a hJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��i�q hJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ hJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8�� y�y hJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f�� yW hJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� hJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ��� i�! iJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)��� i�) iJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d�� i�a iJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��i�q iJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ iJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��y�y iJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��yW iJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� iJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���y�/ iJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���y�? iJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) e �r+��V��: � � e D�v � e84cbc56cc8d3cad5fbc8fdb06739cfdecf9f15a7df56f7d2af53fbc4308d0c3D�u � 2ea0d8ddefec1030824b74aedac593962bb24222add6f70b3b00533ed8993995D�t � 18a2c3ea2e2d5c5ae12660bf9eb03c2d3889e23de31d9b4ab4402b973dc2b813D�s � 8509c76026145b29ba6f1b8ae37a82d1ed82aae0b7d56716d065d753c42837f3D�r � feaa19dbb1f49048b7c247b0f07eca95e4c1ec3e3553221a73e356227d399654D�q � 00063f470db329bdbf0defd2b9622d72db94830b9c0a108b7646f6acb3316563D�p � 3d1213d433cc4f76de4bc1d38f0920c5716b596dcc3ced3dfff4e9e143ba5b59D�o � 5bf6f0344add69eb5397aa58808fbb3f7473db3d8ebc8a33268d40b93fcfe0ccD�n � b922b23c5579da9d7a1a127a1d46f32b941981d9a61ac309ffa1ca688fda5a47D�m � 1988a7c1f3496679d0f5155d1ccdb326d4c38efbb8e673eb67c29ca61004a3daD�l � aff30e07efab7028b05be02c4bbb2921b2c5a2e7a4db5788137073e27ba4e2a7D�k � 7742bb9e3b59162a644886a0fa900fa88dfa7012386ae583ac5a8bd6c5ac79f4D�j � fbc75db0004b4f2ffa063eb646e4714cfa1fa34ce927f4cdac02ed19920adcc8 . /c� � . ���i�) jJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a jJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��i� jJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��i�' jJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��i�1 jJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l�� i�q jJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ jJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���i�! jJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:�� i� kJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G�� i�' kJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f�� yW jJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C�� y� jJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���#i�! kJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���"i�) kJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��!i�a kJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��%i�q kJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��$i�{ kJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��(y�y kJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��'yW kJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��&y� kJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���+i�! lJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���*i�) lJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��)i�a lJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��-i�q lJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��,i�{ lJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��0y�y lJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��/yW lJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��.y� lJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���2y�/ lJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���1y�? lJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���7i�) mJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��6i�a mJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��5i� mJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��4i�' mJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��3i�1 mJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��:i�q mJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��9i�{ mJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���8i�! mJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��>i� nJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��=i�' nJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��<yW mJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��;y� mJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���Ai�! nJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���@i�) nJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��?i�a nJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��Ci�q nJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Bi�{ nJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��Fy�y nJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��EyW nJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Dy� nJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���Ii�! oJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���Hi�) oJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Gi�a oJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��Ki�q oJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Ji�{ oJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��Ny�y oJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��MyW oJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Ly� oJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���Py�/ oJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���Oy�? oJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���Ui�) pJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Ti�a pJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��Si� pJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��Ri�' pJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��Qi�1 pJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��Xi�q pJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Wi�{ pJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���Vi�! pJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��\i� qJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��[i�' qJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��ZyW pJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Yy� pJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���_i�! qJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���^i�) qJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��]i�a qJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��ai�q qJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��`i�{ qJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��dy�y qJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��cyW qJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��by� qJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���gi�! rJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���fi�) rJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��ei�a rJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��ii�q rJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��hi�{ rJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��ly�y rJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��kyW rJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��jy� rJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���ny�/ rJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���my�? rJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���si�) sJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��ri�a sJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��qi� sJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��pi�' sJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��oi�1 sJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��vi�q sJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��ui�{ sJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���ti�! sJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��zi� tJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��yi�' tJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��xyW sJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��wy� sJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���}i�! tJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���|i�) tJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��{i�a tJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��i�q tJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��~i�{ tJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��y�y tJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��yW tJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C�� y� tJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���i�! uJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���i�) uJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a uJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��i�q uJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ uJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8�� y�y uJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f�� yW uJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� uJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ��� y�/ uJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)��� y�? uJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���i�) vJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a vJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��i� vJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��i�' vJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L�� i�1 vJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��i�q vJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ vJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���i�! vJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��i� wJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��i�' wJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��yW vJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� vJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) e �r+��V��: � � e D� � 836e44d1bc907b9e41d6d905730da4fdf18d002f62676006795789a1aaa6084cD� � 96abdf65e00da59857928e4d3001835a9e548fe6b84ef391015153d2fcd5ca97D� � 0718ec7a648c76821e1117532667414db4883898fdd43d3e8a631827814422faD� � 7397d7ada85a990118fbb29a019e0229dcc123eb73b3d901e8a68ca2b7f2da53D� � 7c6aa8cfb40e021ce2fd6990bdd23916f3ceda1eb1455e49f09d1d0fb41d0f7aD�~ � ff7bd67ed63db8e85a6f69944e947f3a58d239a5e418b671d1eea3c8271d0777D�} � 8f8cfe9eb61a9f25ca7e0e1a0141cb8189a5465ea0cb8dd6c524a2ef72866ea8D�| � fb019a858ec470c37fb4514a9c501552516bfe09f3c57ab59409c560d2a46ca9D�{ � adf453caa95445c3a99ca102ec42c7d67b44d897aee8925bb4a1da3f07940c49D�z � 84217b8ac653dfecde5e7761d967ffab45d9ea928e22a4a2cd5a502719a1a0b2D�y � 8682aa231a96b16cfd29d6bcb965dc552b13f5ce5e91dc71b4cb0725eb72bf7bD�x � 8667cee91ed1aa014f71555f076cfab5dd62a042d3dc7ea1d86ef30655b038ddD�w � 523d10d80eca952ef1884acfb524e844fed7f5ba15040c03fb8bfd7e54beaed3 � �� ���i�! wJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���i�) wJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a wJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l�� i�q wJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q�� i�{ wJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8�� y�y wJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f�� yW wJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C�� y� wJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���#i�! xJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���"i�) xJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��!i�a xJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��%i�q xJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��$i�{ xJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��(y�y xJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��'yW xJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��&y� xJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���*y�/ xJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���)y�? xJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���/i�) yJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��.i�a yJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��-i� yJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��,i�' yJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��+i�1 yJiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��2i�q yJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��1i�{ yJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���0i�! yJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��6i� zJiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��5i�' zJiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��4yW yJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��3y� yJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���9i�! zJiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���8i�) zJiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��7i�a zJiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) bR $�RY`gnu|������������������ $+29@GNU\cjqx������������������ '.5<CJQX_fmt{������������������ $r��: $s��> $t��A $u��C $v��F $w��I $x��K $y��N $z��P ${��U $|��X $}��\ $~��_ $��a $���d $���g $���i $���l $���n $���s $���v $���z $���} $��� $��� $��� $��� $��� $��� $��� $��� $��� $��� $��� $��� $���# $���% $���( $���* $���/ $���2 $���6 $���9 $���; $���> $���A $���C $���F $���H $���M $���P $���T $���W $���Y $���\ $���_ $���a $���d $���f $���k $���n $���r $���u $���w $���z $���} $��� $��� $��� $��� $��� $��� $��� $��� $��� $��� $��� $� $Á�" $ā�' $Ł�* $Ɓ�. $ǁ�1 $ȁ�3 $Ɂ�6 $ʁ�9 $ˁ�; $́�> $́�@ $�E $ρ�H $Ё�L $с�O $ҁ�Q $Ӂ�T $ԁ�W $Ձ�Y $ց�\ �l��;i�q zJiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��:i�{ zJiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��>y�y zJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��=yW zJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��<y� zJiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���Ai�! {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���@i�) {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��?i�a {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��Ci�q {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Bi�{ {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��Fy�y {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��EyW {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Dy� {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���Hy�/ {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���Gy�? {Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���Mi�) |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Li�a |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��Ki� |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��Ji�' |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��Ii�1 |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��Pi�q |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Oi�{ |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���Ni�! |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��Ti� }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��Si�' }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��RyW |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Qy� |Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���Wi�! }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���Vi�) }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��Ui�a }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��Yi�q }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��Xi�{ }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��\y�y }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��[yW }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��Zy� }Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���_i�! ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���^i�) ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��]i�a ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��ai�q ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��`i�{ ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��dy�y ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��cyW ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��by� ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���fy�/ ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���ey�? ~Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ���ki�) Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��ji�a Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��ii� Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��hi�' Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��gi�1 Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l��ni�q Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��mi�{ Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)���li�! Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��ri� �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��qi�' �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��pyW Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��oy� Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���ui�! �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���ti�) �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��si�a �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��wi�q �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��vi�{ �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��zy�y �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��yyW �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��xy� �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���}i�! �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���|i�) �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��{i�a �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��i�q �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��~i�{ �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��y�y �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��yW �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C�� y� �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � ` � ���y�/ �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.5`T�@- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)���y�? �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.4`S@�- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557) - virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557) - virdevmapper: Don't cache device-mapper major (rhbz#1933557) - virdevmapper: Handle kernel without device-mapper support (rhbz#1933557) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557) - virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557) - virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557) . /c� � . ��� i�) �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)�:��i� �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��i�' �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)�L��i�1 �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-29]߶�- qemu: Forcibly mknod() even if it exists (rhbz#1752978) - qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517) � �l�� i�q �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q�� i�{ �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)��� i�! �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572) C 8� C �:��i� �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-31]��@- process: wait longer on kill per assigned Hostdev (rhbz#1771204) - process: wait longer 5->30s on hard shutdown (rhbz#1771204)�G��i�' �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-30]�- nwfilter: Remove redundant check if object exists (rhbz#1766475) - RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)f��yW �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C�� y� �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) � �� ���i�! �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���i�) �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l��i�q �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q��i�{ �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485) - qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485) - qemu: don't hold monitor and agent job when setting time (CVE-2019-20485) - qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485) - qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485) - storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703) 8� �8��y�y �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.3_��@- rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)f��yW �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.2_*@- Rebuild to correct invalid dist tag�C��y� �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36.el7_9.1_A@- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952) - util: string: Introduce macro for automatic string lists (rhbz#1839992) - util: Rework virStringListAdd (rhbz#1839992) - qemu: Create multipath targets for PRs (rhbz#1839992) - util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992) - virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992) e �r+��V��: � � e D� � 9fbd7c60ba0ef653dfcf59169cc19e74805f8e102bab5c4d038d343782872528D� � 6da0086ed5fcfe18e8f92777f56bc0561f7b8a591eb03c6f38ba815464fbbdd1D� � de277490ec2359c7396f0b7c4d39dfa4426e563ea8cc9defdaad322dd0c42a48D� � 278b669b053892a784bbbac57d1b11be6496d6c624a0350a7d5628bcc2cba7a9D� � ddfdb301a369e390465e7fed07a523d49328f34568875ece4041374ce5341b09D� � a5af318efcf06316076e95b5e88893eb108d829611813c7fc493ba3ebc5a1e32D� � 0b666836eac572662e426b0b815d751ae62dd8422c5ab5c6d910f8bf94ad1141D� � 49d7fd7bc99dd196b6ad0b23effba028c00ec83384e764f0625ec4d1a888a932D� � 2e4ef0b59e648eed97f857dbb868a2e14afec888dc7074820f587738e8085781D� � 6a232fa9ad8c17cfa5cf5fefe213336bbd9160948ed66031dfd0a65edc56190aD� � 08b4dee7a9b26d0de63eb7b9be7383288a1d179be539eb61df3c1d005566ba5fD� � ebd82b5546583e76abeafb233879f04f1488a96c1f1823eac177889b8218328dD� � afad00b6a6e0787361c27df8bba184168f6a8317833bb2188bd1f6c3ec7c9997 � �� ���i�! �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-34^��- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269) - vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269) - RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)���i�) �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-33^F��- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)�d��i�a �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-32^2�@- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886) - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831) �l�� i�q �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-36^��@- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976) - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)�q�� i�{ �Jiri Denemark <jdenemar@redhat.com> - 4.5.0-35^��@- qemu: don'